CVE-2026-115918

Name of the Vulnerable Software and Affected Versions vLLM versions 0.16.0 through 0.31.0

Description The '/v1/responses' endpoint allows an authenticated user to provide a malicious template via the chat template variable within chat template kwargs when no server template is configured. The get apply chat template kwargs() function fails to enforce the trust request chat template policy, allowing the request to bypass security controls. This can lead to CPU or memory exhaustion during Jinja rendering, a process used to generate text templates.

Recommendations Update to version 0.32.0.