CVE-2026-116176
HIGH 8.8vLLM from 0.9.2 before 0.24.0 contains a server-side request forgery vulnerability that allows API callers to force outbound connections by embedding a decode address in the X-Request-Id header. Attackers can make a P2pNcclConnector prefill worker ZMQ-connect to an attacker host, leaking the NCCL unique_id and KV-cache tensors or blocking the worker.
Severe if exploited (CVSS 8.8), but no known exploitation and low modeled probability. Patch on a normal cadence.
Exploitation likelihood
0.3%chance of exploitation in 30 days · 25th percentile
Impact if exploited
8.8CVSS 4.0 · HIGH
- ConfidentialityHigh
- IntegrityNone
- AvailabilityLow
What an attacker needs
- ✓Access: Reachable over the network — no local access needed
- ✓Privileges: No account or privileges required
- ✓User interaction: No user interaction needed
- ✓Complexity: No special conditions — reliably repeatable
- ✓Requirements: No special attack requirements
✓ lowers the bar for an attacker · ⚠ raises it
Proof of concept
No public PoC is currently catalogued.
Search for new PoCs
Search GitHub now — results may be empty or unverified.
Tracked sources are checked daily for recent CVEs, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.
Data snapshot:
Weakness (CWE)
- CWE-918: Server-Side Request Forgery (SSRF)
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N
References and research data (JSON)
Vendor product assessments
rhaii-fast/vllm-cpu-rhel9 as a component of Red Hat AI Inference Server · known affected
Vendor assessment for this product only.
pkg:oci/vllm-cpu-rhel9@sha256:2e80ddd99b494b543e3b8dbb9ebff9534d8b72370858ac4eb65283563a6e196a?repository_url=registry.redhat.io/rhaii-fast/vllm-cpu-rhel9
- none available: Affected
rhaii-fast/vllm-cuda-rhel9 as a component of Red Hat AI Inference Server · known affected
Vendor assessment for this product only.
pkg:oci/vllm-cuda-rhel9@sha256:032d0e6ec60fd9356e4baacd299ce392eefa904e2a65a092c0f3691b3bd68429?repository_url=registry.redhat.io/rhaii-fast/vllm-cuda-rhel9
- none available: Affected
rhaii-fast/vllm-gaudi-rhel9 as a component of Red Hat AI Inference Server · known affected
Vendor assessment for this product only.
pkg:oci/vllm-gaudi-rhel9@sha256:2763de8c9440c91acdcb3640f8378b6a35395592f835c8499cc0e70ee68d0397?repository_url=registry.redhat.io/rhaii-fast/vllm-gaudi-rhel9
- none available: Affected
rhaii-fast/vllm-neuron-rhel9 as a component of Red Hat AI Inference Server · known affected
Vendor assessment for this product only.
pkg:oci/vllm-neuron-rhel9@sha256:2123ce6126c0b9399eb4f50016cef29faf48db8508b33d7d4418a99f0dbe8f8f?repository_url=registry.redhat.io/rhaii-fast/vllm-neuron-rhel9
- none available: Affected
rhaii-fast/vllm-omni-cuda-rhel9 as a component of Red Hat AI Inference Server · known affected
Vendor assessment for this product only.
pkg:oci/vllm-omni-cuda-rhel9@sha256:b3da826af410b69c2c6126f85c8ad01d46a87e2443df3a8325a0a95ddf82eb8d?repository_url=registry.redhat.io/rhaii-fast/vllm-omni-cuda-rhel9
- none available: Affected
rhaii-fast/vllm-rocm-rhel9 as a component of Red Hat AI Inference Server · known affected
Vendor assessment for this product only.
pkg:oci/vllm-rocm-rhel9@sha256:629cb91485a91d6043867b9cbae7b5c16a73fb8570f3ebd5e611fc74962c3deb?repository_url=registry.redhat.io/rhaii-fast/vllm-rocm-rhel9
- none available: Affected
rhaii-fast/vllm-spyre-rhel9 as a component of Red Hat AI Inference Server · known affected
Vendor assessment for this product only.
pkg:oci/vllm-spyre-rhel9@sha256:888cf46ee153054d83b4dd362ebc2ad45562824e83f2cd4a3ebac2a19d207828?repository_url=registry.redhat.io/rhaii-fast/vllm-spyre-rhel9
- none available: Affected
rhaii-fast/vllm-tpu-rhel9 as a component of Red Hat AI Inference Server · known affected
Vendor assessment for this product only.
pkg:oci/vllm-tpu-rhel9@sha256:beae84a9d32cf6de10ce5e25ae91fd5058b49c82f30a394ce6ee8c896df72e81?repository_url=registry.redhat.io/rhaii-fast/vllm-tpu-rhel9
- none available: Affected
rhaii/vllm-cpu-rhel9 as a component of Red Hat AI Inference Server · known affected
Vendor assessment for this product only.
pkg:oci/vllm-cpu-rhel9@sha256:bcd8563d0888d97cb346557d77f823ba8480daa84695e2bfb9e2e1827117fb39?repository_url=registry.redhat.io/rhaii/vllm-cpu-rhel9
- none available: Affected
rhaii/vllm-cuda-rhel9 as a component of Red Hat AI Inference Server · known affected
Vendor assessment for this product only.
pkg:oci/vllm-cuda-rhel9@sha256:8d8180e8c11b6ab6344ad42ef80ed03e35815d2fcd835b3b4ec931c64b934461?repository_url=registry.redhat.io/rhaii/vllm-cuda-rhel9
- none available: Affected
rhaii/vllm-gaudi-rhel9 as a component of Red Hat AI Inference Server · known affected
Vendor assessment for this product only.
pkg:oci/vllm-gaudi-rhel9@sha256:ba46859d4cb085c111a27bc665c15e5f826320e86c03b940f7a28f40df79ad22?repository_url=registry.redhat.io/rhaii/vllm-gaudi-rhel9
- none available: Affected
rhaii/vllm-neuron-rhel9 as a component of Red Hat AI Inference Server · known affected
Vendor assessment for this product only.
pkg:oci/vllm-neuron-rhel9@sha256:b6e8f608e38ca2cd9ea682a51e9d84dc624171281bd59f600b7eb1fe9f508be2?repository_url=registry.redhat.io/rhaii/vllm-neuron-rhel9
- none available: Affected
rhaii/vllm-rocm-rhel9 as a component of Red Hat AI Inference Server · known affected
Vendor assessment for this product only.
pkg:oci/vllm-rocm-rhel9@sha256:fad3819d9130fa3e9cfa7ab2f0d1b420140d93cfe2242f78dc289146ef985f4e?repository_url=registry.redhat.io/rhaii/vllm-rocm-rhel9
- none available: Affected
rhaii/vllm-spyre-rhel9 as a component of Red Hat AI Inference Server · known affected
Vendor assessment for this product only.
pkg:oci/vllm-spyre-rhel9@sha256:06d05633adc879bab2f1e3e7b3b394873304f4dd520e0f2a0b84da344e9bda30?repository_url=registry.redhat.io/rhaii/vllm-spyre-rhel9
- none available: Affected
rhaii/vllm-tpu-rhel9 as a component of Red Hat AI Inference Server · known affected
Vendor assessment for this product only.
pkg:oci/vllm-tpu-rhel9@sha256:3cdf404f9f3fdda5460ccd26fdcf26e83094ac2c2cdc40ed4bf32501c6e331d8?repository_url=registry.redhat.io/rhaii/vllm-tpu-rhel9
- none available: Affected
rhelai3/bootc-aws-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3 · known affected
Vendor assessment for this product only.
pkg:oci/bootc-aws-cuda-rhel9@sha256:06b1e9b7df858121b6f339a5e78de93307be96c191a1c3e6df50cfeffaf9df15?repository_url=registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9
- none available: Affected
rhelai3/bootc-azure-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3 · known affected
Vendor assessment for this product only.
pkg:oci/bootc-azure-cuda-rhel9@sha256:698d9e34aaf479d0149ea75b841dacbe0117ba2e3718a7088ac98ea6b081792e?repository_url=registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9
- none available: Affected
rhelai3/bootc-azure-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3 · known affected
Vendor assessment for this product only.
pkg:oci/bootc-azure-rocm-rhel9@sha256:87723c21f48eb371968e2d68346953f2a03a3cf643a967801b84696ee3e1f1e8?repository_url=registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9
- none available: Affected
rhelai3/bootc-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3 · known affected
Vendor assessment for this product only.
pkg:oci/bootc-cuda-rhel9@sha256:e0fbb896811ab54d183e23612030072b946674824bad697bf2b3f68362651662?repository_url=registry.redhat.io/rhelai3/bootc-cuda-rhel9
- none available: Affected
rhelai3/bootc-gaudi-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3 · known affected
Vendor assessment for this product only.
pkg:oci/bootc-gaudi-rhel9@sha256:e1057b59ca1be9501332abf97230855e85c7df858356be0da9dce230ea7e98e1?repository_url=registry.redhat.io/rhelai3/bootc-gaudi-rhel9
- none available: Affected
rhelai3/bootc-gcp-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3 · known affected
Vendor assessment for this product only.
pkg:oci/bootc-gcp-cuda-rhel9@sha256:c1a193fa047eedbbf52be0b1d0f5d52e3e572d144a871f7c9322a34ba5abd92f?repository_url=registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9
- none available: Affected
rhelai3/bootc-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3 · known affected
Vendor assessment for this product only.
pkg:oci/bootc-rocm-rhel9@sha256:8fe5203e86917e5f829bd64b831cad31536d23a213b4bfe31e652577ad0faf2e?repository_url=registry.redhat.io/rhelai3/bootc-rocm-rhel9
- none available: Affected
rhoai/odh-kserve-agent-rhel9 as a component of Red Hat OpenShift AI (RHOAI) · known affected
Vendor assessment for this product only.
pkg:oci/odh-kserve-agent-rhel9@sha256:224998a4fd210ae1cbaa34a8764590adb2c1000073d90be80c8c1e18c32228de?repository_url=registry.redhat.io/rhoai/odh-kserve-agent-rhel9
- none available: Affected
rhoai/odh-kserve-controller-rhel9 as a component of Red Hat OpenShift AI (RHOAI) · known affected
Vendor assessment for this product only.
pkg:oci/odh-kserve-controller-rhel9@sha256:988adc9396c792943cce6335c6aff8693650a9ed0ab9c5fcf1617f26f980357b?repository_url=registry.redhat.io/rhoai/odh-kserve-controller-rhel9
- none available: Affected
rhoai/odh-kserve-router-rhel9 as a component of Red Hat OpenShift AI (RHOAI) · known affected
Vendor assessment for this product only.
pkg:oci/odh-kserve-router-rhel9@sha256:f270659c56daef0189f06a91c36aac47283d76d9a8aaef29faa9c2f8a7c09ed2?repository_url=registry.redhat.io/rhoai/odh-kserve-router-rhel9
- none available: Affected
rhoai/odh-kserve-storage-initializer-rhel9 as a component of Red Hat OpenShift AI (RHOAI) · known affected
Vendor assessment for this product only.
pkg:oci/odh-kserve-storage-initializer-rhel9@sha256:5ced0f4f30d995e9dc3a82b9565cd692bb446deb496c8e5bc5b26d27595682d9?repository_url=registry.redhat.io/rhoai/odh-kserve-storage-initializer-rhel9
- none available: Affected
rhoai/odh-llm-d-kv-cache-rhel9 as a component of Red Hat OpenShift AI (RHOAI) · known affected
Vendor assessment for this product only.
pkg:oci/odh-llm-d-kv-cache-rhel9@sha256:cb5eedeefd2578cd9bd8637250bbe299c84539f57b4ead75d630ed9f833a6ef2?repository_url=registry.redhat.io/rhoai/odh-llm-d-kv-cache-rhel9
- none available: Affected
rhoai/odh-th-torch-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI) · known affected
Vendor assessment for this product only.
pkg:oci/odh-th-torch-cuda-py312-rhel9@sha256:4d62d21bf2ad4d4ce28f9e123d9ee0585da64d59cf3c40d3d0b7d29328ddaef4?repository_url=registry.redhat.io/rhoai/odh-th-torch-cuda-py312-rhel9
- none available: Affected
rhoai/odh-vllm-cuda-rhel9 as a component of Red Hat OpenShift AI (RHOAI) · known affected
Vendor assessment for this product only.
pkg:oci/odh-vllm-cuda-rhel9@sha256:d6e6d515afa2f16ddff7d2384859eeaf7ad240f8f5021e0d51835b98d3f2ffd2?repository_url=registry.redhat.io/rhoai/odh-vllm-cuda-rhel9
- none available: Affected
rhoai/odh-vllm-rocm-rhel9 as a component of Red Hat OpenShift AI (RHOAI) · known affected
Vendor assessment for this product only.
pkg:oci/odh-vllm-rocm-rhel9@sha256:41b6d3cd097cf8b66e839a5a6026ed252252740470ecb1c32c87618fc82702e2?repository_url=registry.redhat.io/rhoai/odh-vllm-rocm-rhel9
- none available: Affected
rhoai/odh-vllm-gaudi-rhel9 as a component of Red Hat OpenShift AI (RHOAI) · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:oci/odh-vllm-gaudi-rhel9@sha256:87eec3862eb6ddef445f89dcf6fd89add7ef202ea7c563b1ee7347537fb3e250?repository_url=registry.redhat.io/rhoai/odh-vllm-gaudi-rhel9
Red Hat · CVE-2026-116176 · Updated 2026-10-26T05:51:40+00:00
All CVSS metrics
- HIGH 8.8 v4.0 · CNA Primary
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N - HIGH 8.2 v3.1 · CNA Primary
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L - HIGH 8.8 v4.0 · NVD Secondary
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - HIGH 8.2 v3.1 · NVD Primary
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L
References
Advisories
- https://github.com/vllm-project/vllm/security/advisories/GHSA-vfp2-c8pq-v6h6 CVE record · VulnCheck · Updated 2026-10-25T13:20:16.476Z
NVD · CVE-2026-116176 · Updated 2026-10-25T14:16:57.160
Red Hat · CVE-2026-116176 · Updated 2026-10-26T05:51:40+00:00 - https://www.vulncheck.com/advisories/vllm-0.9.2-before-0.24.0-ssrf-via-x-request-id-in-p2pncclconnector CVE record · VulnCheck · Updated 2026-10-25T13:20:16.476Z
NVD · CVE-2026-116176 · Updated 2026-10-25T14:16:57.160
Red Hat · CVE-2026-116176 · Updated 2026-10-26T05:51:40+00:00 - https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116176.json Red Hat · CVE-2026-116176 · Updated 2026-10-26T05:51:40+00:00
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-109437 EUVD · EUVD-2026-109437
Technical & other
- https://access.redhat.com/security/cve/CVE-2026-116176 Red Hat · CVE-2026-116176 · Updated 2026-10-26T05:51:40+00:00
- https://bugzilla.redhat.com/show_bug.cgi?id=2560404 Red Hat · CVE-2026-116176 · Updated 2026-10-26T05:51:40+00:00
- https://www.cve.org/CVERecord?id=CVE-2026-116176 Red Hat · CVE-2026-116176 · Updated 2026-10-26T05:51:40+00:00
- https://nvd.nist.gov/vuln/detail/CVE-2026-116176 Red Hat · CVE-2026-116176 · Updated 2026-10-26T05:51:40+00:00