一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月15日

CVE-2026-90878 [MEDIUM] – A vulnerability was determined in vllm-project vLLM up to 0.27.1. This affects an unknown

未分类
📑 文章目录

A vulnerability was determined in vllm-project vLLM up to 0.27.1. This affects an unknown part of the file /v1/chat/completions of the component Jinja Template Rendering. This manipulation of the argument chat_template causes resource consumption. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The pull request to fix this issue awaits acceptance.