CVE-2026-73560 | vllm-project vLLM up to 0.25.x mimo_v2_omni.py MiMoV2OmniMultiModalProcessor server-side request forgery

A vulnerability, which was classified as problematic, was found in vllm-project vLLM up to 0.25.x. Affected by this issue is the function MiMoV2OmniMultiModalProcessor of the file vllm/transformers_utils/processors/mimo_v2_omni.py. Executing a manipulation can lead to server-side request forgery.

The identification of this vulnerability is CVE-2026-73560. The attack may be launched remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More