Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
vLLM versions >= 0.6.3 and < 0.9.0 contain multiple regular expression denial of service (ReDoS) vulnerabilities. Several regex patterns — in vllm/lora/utils.py, the phi4mini tool parser, and the OpenAI-compatible serving chat endpoint — are susceptible to catastrophic backtracking. An attacker submitting crafted input with nested or repeated structures can trigger severe CPU consumption and performance degradation, resulting in denial of service.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2025-71379 Regular Expression Denial of Service in vLLM Versions 0.6.3 Through 0.9.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-71379
Post summary
A Regular Expression Denial of Service vulnerability (CVE-2025-71379) affecting vLLM 0.6.3–0.9.0 has been disclosed, with technical details and a link to a vulnerability report.
🚨*CVE* CVE-2025-71379 vLLM versions >= 0.6.3 and < 0.9.0 contain multiple regular expression denial of service (ReDoS) vulnerabilities. Several regex patterns — in vllm/lora/utils.py, the … https://www.cve.org/CVERecord?id=CVE-2025-71379 ----- Traducción: CVE-2025-71379 vLL… http://infoflow.cloud`
Post summary
This post announces CVE-2025-71379, detailing a regular expression denial‑of‑service vulnerability in vLLM versions 0.6.3 to 0.9.0, with technical specifics but no exploit or patch information.
CVE-2025-71379 vLLM versions >= 0.6.3 and < 0.9.0 contain multiple regular expression denial of service (ReDoS) vulnerabilities. Several regex patterns — in vllm/lora/utils.py, the … https://www.cve.org/CVERecord?id=CVE-2025-71379
Post summary
The post announces CVE‑2025‑71379 as a ReDoS vulnerability affecting vLLM versions 0.6.3 through 0.9.0, detailing the impacted regex patterns and source files.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | vllm | vllm | - | - | - |