{"schema":"vulnpedia.research/1","cve":"CVE-2026-57173","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/vllm-project/vllm/security/advisories/GHSA-hcwq-8wjf-3gcr","tags":["x_refsource_CONFIRM","Vendor Advisory","WEB","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-09-16T16:34:39.144Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-09-16T16:34:39.144Z","url":"https://github.com/vllm-project/vllm/security/advisories/GHSA-hcwq-8wjf-3gcr"},{"source":"nvd","sourceId":"CVE-2026-57173","modified":"2026-10-07T14:24:22.100","url":"https://github.com/vllm-project/vllm/security/advisories/GHSA-hcwq-8wjf-3gcr"},{"source":"ghsa","sourceId":"GHSA-hcwq-8wjf-3gcr","url":"https://github.com/vllm-project/vllm/security/advisories/GHSA-hcwq-8wjf-3gcr"},{"source":"pysec","sourceId":"PYSEC-2026-4179","url":"https://github.com/vllm-project/vllm/security/advisories/GHSA-hcwq-8wjf-3gcr"},{"source":"ghsa","sourceId":"GHSA-hcwq-8wjf-3gcr","modified":"2026-10-01T17:56:17.490546142Z","url":"https://github.com/vllm-project/vllm/security/advisories/GHSA-hcwq-8wjf-3gcr"},{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://github.com/vllm-project/vllm/security/advisories/GHSA-hcwq-8wjf-3gcr"}]},{"url":"https://github.com/vllm-project/vllm/pull/45908","tags":["x_refsource_MISC","Issue Tracking","Patch","WEB","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-09-16T16:34:39.144Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-09-16T16:34:39.144Z","url":"https://github.com/vllm-project/vllm/pull/45908"},{"source":"nvd","sourceId":"CVE-2026-57173","modified":"2026-10-07T14:24:22.100","url":"https://github.com/vllm-project/vllm/pull/45908"},{"source":"ghsa","sourceId":"GHSA-hcwq-8wjf-3gcr","url":"https://github.com/vllm-project/vllm/pull/45908"},{"source":"pysec","sourceId":"PYSEC-2026-4179","url":"https://github.com/vllm-project/vllm/pull/45908"},{"source":"ghsa","sourceId":"GHSA-hcwq-8wjf-3gcr","modified":"2026-10-01T17:56:17.490546142Z","url":"https://github.com/vllm-project/vllm/pull/45908"},{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://github.com/vllm-project/vllm/pull/45908"}]},{"url":"https://github.com/vllm-project/vllm/commit/3d20275bb4d434f53055c3c0b645fd8bb072965e","tags":["x_refsource_MISC","Patch","WEB","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-09-16T16:34:39.144Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-09-16T16:34:39.144Z","url":"https://github.com/vllm-project/vllm/commit/3d20275bb4d434f53055c3c0b645fd8bb072965e"},{"source":"nvd","sourceId":"CVE-2026-57173","modified":"2026-10-07T14:24:22.100","url":"https://github.com/vllm-project/vllm/commit/3d20275bb4d434f53055c3c0b645fd8bb072965e"},{"source":"ghsa","sourceId":"GHSA-hcwq-8wjf-3gcr","url":"https://github.com/vllm-project/vllm/commit/3d20275bb4d434f53055c3c0b645fd8bb072965e"},{"source":"pysec","sourceId":"PYSEC-2026-4179","url":"https://github.com/vllm-project/vllm/commit/3d20275bb4d434f53055c3c0b645fd8bb072965e"},{"source":"ghsa","sourceId":"GHSA-hcwq-8wjf-3gcr","modified":"2026-10-01T17:56:17.490546142Z","url":"https://github.com/vllm-project/vllm/commit/3d20275bb4d434f53055c3c0b645fd8bb072965e"},{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://github.com/vllm-project/vllm/commit/3d20275bb4d434f53055c3c0b645fd8bb072965e"}]},{"url":"https://github.com/vllm-project/vllm/releases/tag/v0.24.0","tags":["x_refsource_MISC","Release Notes","WEB","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-09-16T16:34:39.144Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-09-16T16:34:39.144Z","url":"https://github.com/vllm-project/vllm/releases/tag/v0.24.0"},{"source":"nvd","sourceId":"CVE-2026-57173","modified":"2026-10-07T14:24:22.100","url":"https://github.com/vllm-project/vllm/releases/tag/v0.24.0"},{"source":"ghsa","sourceId":"GHSA-hcwq-8wjf-3gcr","url":"https://github.com/vllm-project/vllm/releases/tag/v0.24.0"},{"source":"pysec","sourceId":"PYSEC-2026-4179","url":"https://github.com/vllm-project/vllm/releases/tag/v0.24.0"},{"source":"ghsa","sourceId":"GHSA-hcwq-8wjf-3gcr","modified":"2026-10-01T17:56:17.490546142Z","url":"https://github.com/vllm-project/vllm/releases/tag/v0.24.0"},{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://github.com/vllm-project/vllm/releases/tag/v0.24.0"}]},{"url":"https://osv.dev/vulnerability/GHSA-hcwq-8wjf-3gcr","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-hcwq-8wjf-3gcr","modified":"2026-10-01T17:56:17.490546142Z","origins":[{"source":"ghsa","sourceId":"GHSA-hcwq-8wjf-3gcr","url":"https://osv.dev/vulnerability/GHSA-hcwq-8wjf-3gcr"},{"source":"ghsa","sourceId":"GHSA-hcwq-8wjf-3gcr","modified":"2026-10-01T17:56:17.490546142Z","url":"https://osv.dev/vulnerability/GHSA-hcwq-8wjf-3gcr"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57173","tags":["ADVISORY","vendor-reference"],"source":"ghsa","sourceId":"GHSA-hcwq-8wjf-3gcr","modified":"2026-10-01T17:56:17.490546142Z","origins":[{"source":"ghsa","sourceId":"GHSA-hcwq-8wjf-3gcr","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57173"},{"source":"pysec","sourceId":"PYSEC-2026-4179","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57173"},{"source":"ghsa","sourceId":"GHSA-hcwq-8wjf-3gcr","modified":"2026-10-01T17:56:17.490546142Z","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57173"},{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57173"}]},{"url":"https://github.com/vllm-project/vllm","tags":["PACKAGE"],"source":"ghsa","sourceId":"GHSA-hcwq-8wjf-3gcr","modified":"2026-10-01T17:56:17.490546142Z","origins":[{"source":"ghsa","sourceId":"GHSA-hcwq-8wjf-3gcr","url":"https://github.com/vllm-project/vllm"},{"source":"pysec","sourceId":"PYSEC-2026-4179","url":"https://github.com/vllm-project/vllm"},{"source":"ghsa","sourceId":"GHSA-hcwq-8wjf-3gcr","modified":"2026-10-01T17:56:17.490546142Z","url":"https://github.com/vllm-project/vllm"}]},{"url":"https://osv.dev/vulnerability/PYSEC-2026-4179","tags":["ADVISORY"],"source":"pysec","sourceId":"PYSEC-2026-4179","modified":"2026-10-01T17:45:09.322181474Z","origins":[{"source":"pysec","sourceId":"PYSEC-2026-4179","url":"https://osv.dev/vulnerability/PYSEC-2026-4179"},{"source":"pysec","sourceId":"PYSEC-2026-4179","modified":"2026-10-01T17:45:09.322181474Z","url":"https://osv.dev/vulnerability/PYSEC-2026-4179"}]},{"url":"https://pypi.org/project/vllm","tags":["PACKAGE"],"source":"pysec","sourceId":"PYSEC-2026-4179","modified":"2026-10-01T17:45:09.322181474Z","origins":[{"source":"pysec","sourceId":"PYSEC-2026-4179","url":"https://pypi.org/project/vllm"},{"source":"pysec","sourceId":"PYSEC-2026-4179","modified":"2026-10-01T17:45:09.322181474Z","url":"https://pypi.org/project/vllm"}]},{"url":"https://github.com/advisories/GHSA-hcwq-8wjf-3gcr","tags":["ADVISORY"],"source":"pysec","sourceId":"PYSEC-2026-4179","modified":"2026-10-01T17:45:09.322181474Z","origins":[{"source":"pysec","sourceId":"PYSEC-2026-4179","url":"https://github.com/advisories/GHSA-hcwq-8wjf-3gcr"},{"source":"pysec","sourceId":"PYSEC-2026-4179","modified":"2026-10-01T17:45:09.322181474Z","url":"https://github.com/advisories/GHSA-hcwq-8wjf-3gcr"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-57173","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-57173"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2535557","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2535557"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-57173","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-57173"}]},{"source":"euvd","sourceId":"EUVD-2026-80880","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-80880","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-80880","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-80880"}]}],"packages":[{"source":"ghsa","sourceId":"GHSA-hcwq-8wjf-3gcr","url":"https://osv.dev/vulnerability/GHSA-hcwq-8wjf-3gcr","ecosystem":"PyPI","name":"vllm","purl":"pkg:pypi/vllm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.24.0"}]}],"versions":["0.0.1","0.1.0","0.1.1","0.1.2","0.1.3","0.1.4","0.1.5","0.1.6","0.1.7","0.10.0","0.10.1","0.10.1.1","0.10.2","0.11.0","0.11.1","0.11.2","0.12.0","0.13.0","0.14.0","0.14.1","0.15.0","0.15.1","0.16.0","0.17.0","0.17.1","0.18.0","0.18.1","0.19.0","0.19.1","0.2.0","0.2.1","0.2.1.post1","0.2.2","0.2.3","0.2.4","0.2.5","0.2.6","0.2.7","0.20.0","0.20.1","0.20.2","0.21.0","0.22.0","0.22.1","0.23.0","0.3.0","0.3.1","0.3.2","0.3.3","0.4.0","0.4.0.post1","0.4.1","0.4.2","0.4.3","0.5.0","0.5.0.post1","0.5.1","0.5.2","0.5.3","0.5.3.post1","0.5.4","0.5.5","0.6.0","0.6.1","0.6.1.post1","0.6.1.post2","0.6.2","0.6.3","0.6.3.post1","0.6.4","0.6.4.post1","0.6.5","0.6.6","0.6.6.post1","0.7.0","0.7.1","0.7.2","0.7.3","0.8.0","0.8.1","0.8.2","0.8.3","0.8.4","0.8.5","0.8.5.post1","0.9.0","0.9.0.1","0.9.1","0.9.2"],"databaseSpecific":{"last_known_affected_version_range":"<= 0.23.0","source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/09/GHSA-hcwq-8wjf-3gcr/GHSA-hcwq-8wjf-3gcr.json"},"modified":"2026-10-01T17:56:17.490546142Z","origins":[{"source":"ghsa","sourceId":"GHSA-hcwq-8wjf-3gcr","modified":"2026-10-01T17:56:17.490546142Z","url":"https://osv.dev/vulnerability/GHSA-hcwq-8wjf-3gcr"}]},{"source":"pysec","sourceId":"PYSEC-2026-4179","url":"https://osv.dev/vulnerability/PYSEC-2026-4179","ecosystem":"PyPI","name":"vllm","purl":"pkg:pypi/vllm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.24.0"}]}],"versions":["0.0.1","0.1.0","0.1.1","0.1.2","0.1.3","0.1.4","0.1.5","0.1.6","0.1.7","0.10.0","0.10.1","0.10.1.1","0.10.2","0.11.0","0.11.1","0.11.2","0.12.0","0.13.0","0.14.0","0.14.1","0.15.0","0.15.1","0.16.0","0.17.0","0.17.1","0.18.0","0.18.1","0.19.0","0.19.1","0.2.0","0.2.1","0.2.1.post1","0.2.2","0.2.3","0.2.4","0.2.5","0.2.6","0.2.7","0.20.0","0.20.1","0.20.2","0.21.0","0.22.0","0.22.1","0.23.0","0.3.0","0.3.1","0.3.2","0.3.3","0.4.0","0.4.0.post1","0.4.1","0.4.2","0.4.3","0.5.0","0.5.0.post1","0.5.1","0.5.2","0.5.3","0.5.3.post1","0.5.4","0.5.5","0.6.0","0.6.1","0.6.1.post1","0.6.1.post2","0.6.2","0.6.3","0.6.3.post1","0.6.4","0.6.4.post1","0.6.5","0.6.6","0.6.6.post1","0.7.0","0.7.1","0.7.2","0.7.3","0.8.0","0.8.1","0.8.2","0.8.3","0.8.4","0.8.5","0.8.5.post1","0.9.0","0.9.0.1","0.9.1","0.9.2"],"databaseSpecific":{"source":"https://github.com/pypa/advisory-database/blob/main/vulns/vllm/PYSEC-2026-4179.yaml"},"modified":"2026-10-01T17:45:09.322181474Z","origins":[{"source":"pysec","sourceId":"PYSEC-2026-4179","modified":"2026-10-01T17:45:09.322181474Z","url":"https://osv.dev/vulnerability/PYSEC-2026-4179"}]}],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json","productId":"red_hat_ai_inference_server:rhaii/vllm-cpu-rhel9","product":"rhaii/vllm-cpu-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, restrict network access to the vLLM service to trusted clients only. Alternatively, if audio processing is not required, avoid deploying audio-capable models to eliminate the vulnerable attack surface. If the service is exposed, ensure proper network segmentation and firewall rules are in place to limit reachability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/vllm-cpu-rhel9?repository_url=registry.redhat.io/rhaii/vllm-cpu-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json"}]},{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json","productId":"red_hat_ai_inference_server:rhaii/vllm-cuda-rhel9","product":"rhaii/vllm-cuda-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, restrict network access to the vLLM service to trusted clients only. Alternatively, if audio processing is not required, avoid deploying audio-capable models to eliminate the vulnerable attack surface. If the service is exposed, ensure proper network segmentation and firewall rules are in place to limit reachability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/vllm-cuda-rhel9?repository_url=registry.redhat.io/rhaii/vllm-cuda-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json"}]},{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json","productId":"red_hat_ai_inference_server:rhaii/vllm-gaudi-rhel9","product":"rhaii/vllm-gaudi-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, restrict network access to the vLLM service to trusted clients only. Alternatively, if audio processing is not required, avoid deploying audio-capable models to eliminate the vulnerable attack surface. If the service is exposed, ensure proper network segmentation and firewall rules are in place to limit reachability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/vllm-gaudi-rhel9?repository_url=registry.redhat.io/rhaii/vllm-gaudi-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json"}]},{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json","productId":"red_hat_ai_inference_server:rhaii/vllm-neuron-rhel9","product":"rhaii/vllm-neuron-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, restrict network access to the vLLM service to trusted clients only. Alternatively, if audio processing is not required, avoid deploying audio-capable models to eliminate the vulnerable attack surface. If the service is exposed, ensure proper network segmentation and firewall rules are in place to limit reachability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/vllm-neuron-rhel9?repository_url=registry.redhat.io/rhaii/vllm-neuron-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json"}]},{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json","productId":"red_hat_ai_inference_server:rhaii/vllm-rocm-rhel9","product":"rhaii/vllm-rocm-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, restrict network access to the vLLM service to trusted clients only. Alternatively, if audio processing is not required, avoid deploying audio-capable models to eliminate the vulnerable attack surface. If the service is exposed, ensure proper network segmentation and firewall rules are in place to limit reachability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/vllm-rocm-rhel9?repository_url=registry.redhat.io/rhaii/vllm-rocm-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json"}]},{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json","productId":"red_hat_ai_inference_server:rhaii/vllm-spyre-rhel9","product":"rhaii/vllm-spyre-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, restrict network access to the vLLM service to trusted clients only. Alternatively, if audio processing is not required, avoid deploying audio-capable models to eliminate the vulnerable attack surface. If the service is exposed, ensure proper network segmentation and firewall rules are in place to limit reachability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/vllm-spyre-rhel9?repository_url=registry.redhat.io/rhaii/vllm-spyre-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json"}]},{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json","productId":"red_hat_ai_inference_server:rhaii/vllm-tpu-rhel9","product":"rhaii/vllm-tpu-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, restrict network access to the vLLM service to trusted clients only. Alternatively, if audio processing is not required, avoid deploying audio-capable models to eliminate the vulnerable attack surface. If the service is exposed, ensure proper network segmentation and firewall rules are in place to limit reachability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/vllm-tpu-rhel9?repository_url=registry.redhat.io/rhaii/vllm-tpu-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json"}]},{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json","productId":"red_hat_ai_inference_server:rhaiis/vllm-cpu-rhel9","product":"rhaiis/vllm-cpu-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, restrict network access to the vLLM service to trusted clients only. Alternatively, if audio processing is not required, avoid deploying audio-capable models to eliminate the vulnerable attack surface. If the service is exposed, ensure proper network segmentation and firewall rules are in place to limit reachability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/vllm-cpu-rhel9?repository_url=registry.redhat.io/rhaiis/vllm-cpu-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json"}]},{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json","productId":"red_hat_ai_inference_server:rhaiis/vllm-cuda-rhel9","product":"rhaiis/vllm-cuda-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, restrict network access to the vLLM service to trusted clients only. Alternatively, if audio processing is not required, avoid deploying audio-capable models to eliminate the vulnerable attack surface. If the service is exposed, ensure proper network segmentation and firewall rules are in place to limit reachability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/vllm-cuda-rhel9?repository_url=registry.redhat.io/rhaiis/vllm-cuda-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json"}]},{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json","productId":"red_hat_ai_inference_server:rhaiis/vllm-neuron-rhel9","product":"rhaiis/vllm-neuron-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, restrict network access to the vLLM service to trusted clients only. Alternatively, if audio processing is not required, avoid deploying audio-capable models to eliminate the vulnerable attack surface. If the service is exposed, ensure proper network segmentation and firewall rules are in place to limit reachability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/vllm-neuron-rhel9?repository_url=registry.redhat.io/rhaiis/vllm-neuron-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json"}]},{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json","productId":"red_hat_ai_inference_server:rhaiis/vllm-rocm-rhel9","product":"rhaiis/vllm-rocm-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, restrict network access to the vLLM service to trusted clients only. Alternatively, if audio processing is not required, avoid deploying audio-capable models to eliminate the vulnerable attack surface. If the service is exposed, ensure proper network segmentation and firewall rules are in place to limit reachability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/vllm-rocm-rhel9?repository_url=registry.redhat.io/rhaiis/vllm-rocm-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json"}]},{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json","productId":"red_hat_ai_inference_server:rhaiis/vllm-spyre-rhel9","product":"rhaiis/vllm-spyre-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, restrict network access to the vLLM service to trusted clients only. Alternatively, if audio processing is not required, avoid deploying audio-capable models to eliminate the vulnerable attack surface. If the service is exposed, ensure proper network segmentation and firewall rules are in place to limit reachability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/vllm-spyre-rhel9?repository_url=registry.redhat.io/rhaiis/vllm-spyre-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json"}]},{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json","productId":"red_hat_ai_inference_server:rhaiis/vllm-tpu-rhel9","product":"rhaiis/vllm-tpu-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, restrict network access to the vLLM service to trusted clients only. Alternatively, if audio processing is not required, avoid deploying audio-capable models to eliminate the vulnerable attack surface. If the service is exposed, ensure proper network segmentation and firewall rules are in place to limit reachability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/vllm-tpu-rhel9?repository_url=registry.redhat.io/rhaiis/vllm-tpu-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json"}]},{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-aws-cuda-rhel9","product":"rhelai3/bootc-aws-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, restrict network access to the vLLM service to trusted clients only. Alternatively, if audio processing is not required, avoid deploying audio-capable models to eliminate the vulnerable attack surface. If the service is exposed, ensure proper network segmentation and firewall rules are in place to limit reachability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/bootc-aws-cuda-rhel9?repository_url=registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json"}]},{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-azure-cuda-rhel9","product":"rhelai3/bootc-azure-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, restrict network access to the vLLM service to trusted clients only. Alternatively, if audio processing is not required, avoid deploying audio-capable models to eliminate the vulnerable attack surface. If the service is exposed, ensure proper network segmentation and firewall rules are in place to limit reachability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/bootc-azure-cuda-rhel9?repository_url=registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json"}]},{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-azure-rocm-rhel9","product":"rhelai3/bootc-azure-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, restrict network access to the vLLM service to trusted clients only. Alternatively, if audio processing is not required, avoid deploying audio-capable models to eliminate the vulnerable attack surface. If the service is exposed, ensure proper network segmentation and firewall rules are in place to limit reachability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/bootc-azure-rocm-rhel9?repository_url=registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json"}]},{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-cuda-rhel9","product":"rhelai3/bootc-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, restrict network access to the vLLM service to trusted clients only. Alternatively, if audio processing is not required, avoid deploying audio-capable models to eliminate the vulnerable attack surface. If the service is exposed, ensure proper network segmentation and firewall rules are in place to limit reachability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/bootc-cuda-rhel9?repository_url=registry.redhat.io/rhelai3/bootc-cuda-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json"}]},{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-gaudi-rhel9","product":"rhelai3/bootc-gaudi-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, restrict network access to the vLLM service to trusted clients only. Alternatively, if audio processing is not required, avoid deploying audio-capable models to eliminate the vulnerable attack surface. If the service is exposed, ensure proper network segmentation and firewall rules are in place to limit reachability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/bootc-gaudi-rhel9?repository_url=registry.redhat.io/rhelai3/bootc-gaudi-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json"}]},{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-gcp-cuda-rhel9","product":"rhelai3/bootc-gcp-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, restrict network access to the vLLM service to trusted clients only. Alternatively, if audio processing is not required, avoid deploying audio-capable models to eliminate the vulnerable attack surface. If the service is exposed, ensure proper network segmentation and firewall rules are in place to limit reachability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/bootc-gcp-cuda-rhel9?repository_url=registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json"}]},{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-rocm-rhel9","product":"rhelai3/bootc-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, restrict network access to the vLLM service to trusted clients only. Alternatively, if audio processing is not required, avoid deploying audio-capable models to eliminate the vulnerable attack surface. If the service is exposed, ensure proper network segmentation and firewall rules are in place to limit reachability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/bootc-rocm-rhel9?repository_url=registry.redhat.io/rhelai3/bootc-rocm-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json"}]},{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-kserve-agent-rhel9","product":"rhoai/odh-kserve-agent-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, restrict network access to the vLLM service to trusted clients only. Alternatively, if audio processing is not required, avoid deploying audio-capable models to eliminate the vulnerable attack surface. If the service is exposed, ensure proper network segmentation and firewall rules are in place to limit reachability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-kserve-agent-rhel9?repository_url=registry.redhat.io/rhoai/odh-kserve-agent-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json"}]},{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-kserve-controller-rhel9","product":"rhoai/odh-kserve-controller-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, restrict network access to the vLLM service to trusted clients only. Alternatively, if audio processing is not required, avoid deploying audio-capable models to eliminate the vulnerable attack surface. If the service is exposed, ensure proper network segmentation and firewall rules are in place to limit reachability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-kserve-controller-rhel9?repository_url=registry.redhat.io/rhoai/odh-kserve-controller-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json"}]},{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-kserve-router-rhel9","product":"rhoai/odh-kserve-router-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, restrict network access to the vLLM service to trusted clients only. Alternatively, if audio processing is not required, avoid deploying audio-capable models to eliminate the vulnerable attack surface. If the service is exposed, ensure proper network segmentation and firewall rules are in place to limit reachability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-kserve-router-rhel9?repository_url=registry.redhat.io/rhoai/odh-kserve-router-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json"}]},{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-kserve-storage-initializer-rhel9","product":"rhoai/odh-kserve-storage-initializer-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, restrict network access to the vLLM service to trusted clients only. Alternatively, if audio processing is not required, avoid deploying audio-capable models to eliminate the vulnerable attack surface. If the service is exposed, ensure proper network segmentation and firewall rules are in place to limit reachability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-kserve-storage-initializer-rhel9?repository_url=registry.redhat.io/rhoai/odh-kserve-storage-initializer-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json"}]},{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-llm-d-kv-cache-rhel9","product":"rhoai/odh-llm-d-kv-cache-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, restrict network access to the vLLM service to trusted clients only. Alternatively, if audio processing is not required, avoid deploying audio-capable models to eliminate the vulnerable attack surface. If the service is exposed, ensure proper network segmentation and firewall rules are in place to limit reachability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-llm-d-kv-cache-rhel9?repository_url=registry.redhat.io/rhoai/odh-llm-d-kv-cache-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json"}]},{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-th-torch-cuda-py312-rhel9","product":"rhoai/odh-th-torch-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, restrict network access to the vLLM service to trusted clients only. Alternatively, if audio processing is not required, avoid deploying audio-capable models to eliminate the vulnerable attack surface. If the service is exposed, ensure proper network segmentation and firewall rules are in place to limit reachability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-th-torch-cuda-py312-rhel9?repository_url=registry.redhat.io/rhoai/odh-th-torch-cuda-py312-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json"}]},{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-vllm-gaudi-rhel9","product":"rhoai/odh-vllm-gaudi-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, restrict network access to the vLLM service to trusted clients only. Alternatively, if audio processing is not required, avoid deploying audio-capable models to eliminate the vulnerable attack surface. If the service is exposed, ensure proper network segmentation and firewall rules are in place to limit reachability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-vllm-gaudi-rhel9?repository_url=registry.redhat.io/rhoai/odh-vllm-gaudi-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-57173","modified":"2026-09-24T12:47:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57173.json"}]}],"vendorCoverage":{"total":27,"shown":27,"omitted":0,"source":"redhat"}}