{"schema":"vulnpedia.research/1","cve":"CVE-2026-103241","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://vuldb.com/vuln/411965","tags":["vdb-entry","Third Party Advisory","VDB Entry","ADVISORY"],"source":"mitre","sourceId":"VulDB","modified":"2026-09-30T16:45:13.581Z","origins":[{"source":"mitre","sourceId":"VulDB","modified":"2026-09-30T16:45:13.581Z","url":"https://vuldb.com/vuln/411965"},{"source":"nvd","sourceId":"CVE-2026-103241","modified":"2026-10-06T17:14:37.097","url":"https://vuldb.com/vuln/411965"},{"source":"pysec","sourceId":"PYSEC-2026-4186","url":"https://vuldb.com/vuln/411965"},{"source":"pysec","sourceId":"PYSEC-2026-4186","modified":"2026-10-07T10:00:03.381099728Z","url":"https://vuldb.com/vuln/411965"}]},{"url":"https://vuldb.com/vuln/411965/cti","tags":["signature","permissions-required","Permissions Required","VDB Entry","REPORT"],"source":"mitre","sourceId":"VulDB","modified":"2026-09-30T16:45:13.581Z","origins":[{"source":"mitre","sourceId":"VulDB","modified":"2026-09-30T16:45:13.581Z","url":"https://vuldb.com/vuln/411965/cti"},{"source":"nvd","sourceId":"CVE-2026-103241","modified":"2026-10-06T17:14:37.097","url":"https://vuldb.com/vuln/411965/cti"},{"source":"pysec","sourceId":"PYSEC-2026-4186","url":"https://vuldb.com/vuln/411965/cti"},{"source":"pysec","sourceId":"PYSEC-2026-4186","modified":"2026-10-07T10:00:03.381099728Z","url":"https://vuldb.com/vuln/411965/cti"}]},{"url":"https://vuldb.com/cve/CVE-2026-103241","tags":["third-party-advisory","Third Party Advisory","VDB Entry","ADVISORY"],"source":"mitre","sourceId":"VulDB","modified":"2026-09-30T16:45:13.581Z","origins":[{"source":"mitre","sourceId":"VulDB","modified":"2026-09-30T16:45:13.581Z","url":"https://vuldb.com/cve/CVE-2026-103241"},{"source":"nvd","sourceId":"CVE-2026-103241","modified":"2026-10-06T17:14:37.097","url":"https://vuldb.com/cve/CVE-2026-103241"},{"source":"pysec","sourceId":"PYSEC-2026-4186","url":"https://vuldb.com/cve/CVE-2026-103241"},{"source":"pysec","sourceId":"PYSEC-2026-4186","modified":"2026-10-07T10:00:03.381099728Z","url":"https://vuldb.com/cve/CVE-2026-103241"}]},{"url":"https://vuldb.com/submit/956250","tags":["third-party-advisory","Third Party Advisory","VDB Entry","ADVISORY"],"source":"mitre","sourceId":"VulDB","modified":"2026-09-30T16:45:13.581Z","origins":[{"source":"mitre","sourceId":"VulDB","modified":"2026-09-30T16:45:13.581Z","url":"https://vuldb.com/submit/956250"},{"source":"nvd","sourceId":"CVE-2026-103241","modified":"2026-10-06T17:14:37.097","url":"https://vuldb.com/submit/956250"},{"source":"pysec","sourceId":"PYSEC-2026-4186","url":"https://vuldb.com/submit/956250"},{"source":"pysec","sourceId":"PYSEC-2026-4186","modified":"2026-10-07T10:00:03.381099728Z","url":"https://vuldb.com/submit/956250"}]},{"url":"https://github.com/vllm-project/vllm/issues/50927","tags":["issue-tracking","Issue Tracking","Patch","FIX"],"source":"mitre","sourceId":"VulDB","modified":"2026-09-30T16:45:13.581Z","origins":[{"source":"mitre","sourceId":"VulDB","modified":"2026-09-30T16:45:13.581Z","url":"https://github.com/vllm-project/vllm/issues/50927"},{"source":"nvd","sourceId":"CVE-2026-103241","modified":"2026-10-06T17:14:37.097","url":"https://github.com/vllm-project/vllm/issues/50927"},{"source":"pysec","sourceId":"PYSEC-2026-4186","url":"https://github.com/vllm-project/vllm/issues/50927"},{"source":"pysec","sourceId":"PYSEC-2026-4186","modified":"2026-10-07T10:00:03.381099728Z","url":"https://github.com/vllm-project/vllm/issues/50927"}]},{"url":"https://github.com/vllm-project/vllm/pull/54303","tags":["issue-tracking","patch","Issue Tracking","Patch","FIX"],"source":"mitre","sourceId":"VulDB","modified":"2026-09-30T16:45:13.581Z","origins":[{"source":"mitre","sourceId":"VulDB","modified":"2026-09-30T16:45:13.581Z","url":"https://github.com/vllm-project/vllm/pull/54303"},{"source":"nvd","sourceId":"CVE-2026-103241","modified":"2026-10-06T17:14:37.097","url":"https://github.com/vllm-project/vllm/pull/54303"},{"source":"pysec","sourceId":"PYSEC-2026-4186","url":"https://github.com/vllm-project/vllm/pull/54303"},{"source":"pysec","sourceId":"PYSEC-2026-4186","modified":"2026-10-07T10:00:03.381099728Z","url":"https://github.com/vllm-project/vllm/pull/54303"}]},{"url":"https://gist.github.com/Yunzez/8e98d656aa667095b513161eb056d28e","tags":["exploit","Product","WEB"],"source":"mitre","sourceId":"VulDB","modified":"2026-09-30T16:45:13.581Z","origins":[{"source":"mitre","sourceId":"VulDB","modified":"2026-09-30T16:45:13.581Z","url":"https://gist.github.com/Yunzez/8e98d656aa667095b513161eb056d28e"},{"source":"nvd","sourceId":"CVE-2026-103241","modified":"2026-10-06T17:14:37.097","url":"https://gist.github.com/Yunzez/8e98d656aa667095b513161eb056d28e"},{"source":"pysec","sourceId":"PYSEC-2026-4186","url":"https://gist.github.com/Yunzez/8e98d656aa667095b513161eb056d28e"},{"source":"pysec","sourceId":"PYSEC-2026-4186","modified":"2026-10-07T10:00:03.381099728Z","url":"https://gist.github.com/Yunzez/8e98d656aa667095b513161eb056d28e"}]},{"url":"https://github.com/vllm-project/vllm/commit/3439bad37e68ba9755a46f4f6b44a4aeaf1f60a9","tags":["patch","Patch","FIX"],"source":"mitre","sourceId":"VulDB","modified":"2026-09-30T16:45:13.581Z","origins":[{"source":"mitre","sourceId":"VulDB","modified":"2026-09-30T16:45:13.581Z","url":"https://github.com/vllm-project/vllm/commit/3439bad37e68ba9755a46f4f6b44a4aeaf1f60a9"},{"source":"nvd","sourceId":"CVE-2026-103241","modified":"2026-10-06T17:14:37.097","url":"https://github.com/vllm-project/vllm/commit/3439bad37e68ba9755a46f4f6b44a4aeaf1f60a9"},{"source":"pysec","sourceId":"PYSEC-2026-4186","url":"https://github.com/vllm-project/vllm/commit/3439bad37e68ba9755a46f4f6b44a4aeaf1f60a9"},{"source":"pysec","sourceId":"PYSEC-2026-4186","modified":"2026-10-07T10:00:03.381099728Z","url":"https://github.com/vllm-project/vllm/commit/3439bad37e68ba9755a46f4f6b44a4aeaf1f60a9"}]},{"url":"https://github.com/vllm-project/vllm/releases/tag/v0.29.1rc0","tags":["patch","Release Notes","ADVISORY"],"source":"mitre","sourceId":"VulDB","modified":"2026-09-30T16:45:13.581Z","origins":[{"source":"mitre","sourceId":"VulDB","modified":"2026-09-30T16:45:13.581Z","url":"https://github.com/vllm-project/vllm/releases/tag/v0.29.1rc0"},{"source":"nvd","sourceId":"CVE-2026-103241","modified":"2026-10-06T17:14:37.097","url":"https://github.com/vllm-project/vllm/releases/tag/v0.29.1rc0"},{"source":"pysec","sourceId":"PYSEC-2026-4186","url":"https://github.com/vllm-project/vllm/releases/tag/v0.29.1rc0"},{"source":"pysec","sourceId":"PYSEC-2026-4186","modified":"2026-10-07T10:00:03.381099728Z","url":"https://github.com/vllm-project/vllm/releases/tag/v0.29.1rc0"}]},{"url":"https://github.com/vllm-project/vllm/","tags":["product","Product","WEB"],"source":"mitre","sourceId":"VulDB","modified":"2026-09-30T16:45:13.581Z","origins":[{"source":"mitre","sourceId":"VulDB","modified":"2026-09-30T16:45:13.581Z","url":"https://github.com/vllm-project/vllm/"},{"source":"nvd","sourceId":"CVE-2026-103241","modified":"2026-10-06T17:14:37.097","url":"https://github.com/vllm-project/vllm/"},{"source":"pysec","sourceId":"PYSEC-2026-4186","url":"https://github.com/vllm-project/vllm/"},{"source":"pysec","sourceId":"PYSEC-2026-4186","modified":"2026-10-07T10:00:03.381099728Z","url":"https://github.com/vllm-project/vllm/"}]},{"url":"https://osv.dev/vulnerability/PYSEC-2026-4186","tags":["ADVISORY"],"source":"pysec","sourceId":"PYSEC-2026-4186","modified":"2026-10-07T10:00:03.381099728Z","origins":[{"source":"pysec","sourceId":"PYSEC-2026-4186","url":"https://osv.dev/vulnerability/PYSEC-2026-4186"},{"source":"pysec","sourceId":"PYSEC-2026-4186","modified":"2026-10-07T10:00:03.381099728Z","url":"https://osv.dev/vulnerability/PYSEC-2026-4186"}]},{"source":"euvd","sourceId":"EUVD-2026-90191","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-90191","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-90191","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-90191"}]}],"packages":[{"source":"pysec","sourceId":"PYSEC-2026-4186","url":"https://osv.dev/vulnerability/PYSEC-2026-4186","ecosystem":"PyPI","name":"vllm","purl":"pkg:pypi/vllm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.27.0"}]}],"versions":["0.0.1","0.1.0","0.1.1","0.1.2","0.1.3","0.1.4","0.1.5","0.1.6","0.1.7","0.10.0","0.10.1","0.10.1.1","0.10.2","0.11.0","0.11.1","0.11.2","0.12.0","0.13.0","0.14.0","0.14.1","0.15.0","0.15.1","0.16.0","0.17.0","0.17.1","0.18.0","0.18.1","0.19.0","0.19.1","0.2.0","0.2.1","0.2.1.post1","0.2.2","0.2.3","0.2.4","0.2.5","0.2.6","0.2.7","0.20.0","0.20.1","0.20.2","0.21.0","0.22.0","0.22.1","0.23.0","0.24.0","0.25.0","0.25.1","0.26.0","0.3.0","0.3.1","0.3.2","0.3.3","0.4.0","0.4.0.post1","0.4.1","0.4.2","0.4.3","0.5.0","0.5.0.post1","0.5.1","0.5.2","0.5.3","0.5.3.post1","0.5.4","0.5.5","0.6.0","0.6.1","0.6.1.post1","0.6.1.post2","0.6.2","0.6.3","0.6.3.post1","0.6.4","0.6.4.post1","0.6.5","0.6.6","0.6.6.post1","0.7.0","0.7.1","0.7.2","0.7.3","0.8.0","0.8.1","0.8.2","0.8.3","0.8.4","0.8.5","0.8.5.post1","0.9.0","0.9.0.1","0.9.1","0.9.2"],"ecosystemSpecific":{},"databaseSpecific":{"source":"https://github.com/pypa/advisory-database/blob/main/vulns/vllm/PYSEC-2026-4186.yaml"},"modified":"2026-10-07T10:00:03.381099728Z","origins":[{"source":"pysec","sourceId":"PYSEC-2026-4186","modified":"2026-10-07T10:00:03.381099728Z","url":"https://osv.dev/vulnerability/PYSEC-2026-4186"}]}],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[]}