CyberRota Analysis
AI-GeneratedThe vllm-project vLLM versions up to 0.27.1 are vulnerable due to a flaw in the Jinja Template Rendering component, specifically in the /v1/chat/completions file, which can lead to excessive resource consumption. This vulnerability can be exploited remotely, potentially impacting system performance and availability. Organizations using affected versions should prioritize remediation, especially those relying on chat functionalities in their applications.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was determined in vllm-project vLLM up to 0.27.1. This affects an unknown part of the file /v1/chat/completions of the component Jinja Template Rendering. This manipulation of the argument chat_template causes resource consumption. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The pull request to fix this issue awaits acceptance.