CVE-2025-61620

{}

{}

{}

{"acknowledgement": "Red Hat would like to thank DarkLight1337, Ga_ryo, Isotr0py, and keymoon for reporting this issue.", "bugzilla": {"description": "vllm: vLLM OpenAI-Compatible Server Resource Exhaustion via chat_template Parameters", "id": "2401761", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2401761"}, "csaw": false, "cvss3": {"cvss3_base_score": "6.5", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-400", "details": ["A flaw was found in the server implementation of vLLM, where the handling of Jinja templates does not properly validate user-supplied input through the chat_template and chat_template_kwargs parameters. When a specially crafted template is processed, it can trigger excessive looping or recursion inside the Jinja engine, consuming large amounts of CPU and memory. This can cause the server to become unresponsive or crash, resulting in a denial-of-service (DoS) condition for applications using vLLM."], "mitigation": {"lang": "en:us", "value": "Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}, "name": "CVE-2025-61620", "public_date": "2025-10-08T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2025-61620\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-61620"], "statement": "The Red Hat Product Security team has assessed the severity of this vulnerability as Moderate, as it requires authenticated access or the ability to supply templates to the vLLM server. Successful exploitation allows an attacker to exhaust system resources by submitting maliciously crafted Jinja templates that trigger excessive CPU and memory usage. The vulnerability\u2019s root cause is the lack of proper validation and sandboxing of user-supplied template data, which can lead to denial-of-service (DoS) conditions affecting the availability of services built on vLLM.", "threat_severity": "Moderate"}

{}