CVE-2025-59425 | vLLM up to 0.10.2 API improper authentication

October 7, 2025 Yanac

A vulnerability marked as critical has been reported in vLLM up to 0.10.2. This issue affects some unknown processing of the component API. This manipulation causes improper authentication.

This vulnerability is handled as CVE-2025-59425. The attack can only be done within the local network. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More