vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied features

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-105754 · Microsoft / collected KEV context

cve-program · CVE-2026-105754

• https://github.com/vllm-project/vllm/security/advisories/GHSA-ph72-cqr5-qpp7
• https://github.com/vllm-project/vllm/pull/51898
• https://github.com/vllm-project/vllm/commit/1970f3ed4be7fa8620e4ddc4a12c36a8384cfc27
• https://github.com/vllm-project/vllm/releases/tag/v0.30.0

No related operational record is retained in the current change model.