CVE-2025-6242
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2025
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Vllm: server side request forgery (ssrf) in mediaconnector
A Server-Side Request Forgery (SSRF) vulnerability exists in the MediaConnector class within the vLLM project's multimodal feature set. The load_from_url and load_from_url_async methods fetch and process media from user-provided URLs without adequate restrictions on the target hosts. This allows an attacker to coerce the vLLM server into making arbitrary requests to internal network resources.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Red Hat AI Inference Server
- Vendor
- Red Hat
- Product
- Red Hat AI Inference Server
- Platforms
- Unknown
- Default status
affected- Package
- rhaiis-preview/vllm-cuda-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat AI Inference Server
- Vendor
- Red Hat
- Product
- Red Hat AI Inference Server
- Platforms
- Unknown
- Default status
affected- Package
- rhaiis/vllm-cuda-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat AI Inference Server
- Vendor
- Red Hat
- Product
- Red Hat AI Inference Server
- Platforms
- Unknown
- Default status
affected- Package
- rhaiis/vllm-rocm-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat AI Inference Server
- Vendor
- Red Hat
- Product
- Red Hat AI Inference Server
- Platforms
- Unknown
- Default status
affected- Package
- rhaiis/vllm-tpu-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux AI (RHEL AI)
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux AI (RHEL AI)
- Platforms
- Unknown
- Default status
affected- Package
- rhelai1/bootc-amd-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux AI (RHEL AI)
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux AI (RHEL AI)
- Platforms
- Unknown
- Default status
affected- Package
- rhelai1/bootc-aws-nvidia-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux AI (RHEL AI)
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux AI (RHEL AI)
- Platforms
- Unknown
- Default status
affected- Package
- rhelai1/bootc-azure-amd-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux AI (RHEL AI)
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux AI (RHEL AI)
- Platforms
- Unknown
- Default status
affected- Package
- rhelai1/bootc-azure-nvidia-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux AI (RHEL AI)
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux AI (RHEL AI)
- Platforms
- Unknown
- Default status
affected- Package
- rhelai1/bootc-gcp-nvidia-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux AI (RHEL AI)
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux AI (RHEL AI)
- Platforms
- Unknown
- Default status
affected- Package
- rhelai1/bootc-intel-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux AI (RHEL AI)
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux AI (RHEL AI)
- Platforms
- Unknown
- Default status
affected- Package
- rhelai1/bootc-nvidia-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux AI (RHEL AI)
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux AI (RHEL AI)
- Platforms
- Unknown
- Default status
affected- Package
- rhelai1/disk-image-nvidia-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux AI (RHEL AI)
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux AI (RHEL AI)
- Platforms
- Unknown
- Default status
affected- Package
- rhelai1/docling-serve-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux AI (RHEL AI)
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux AI (RHEL AI)
- Platforms
- Unknown
- Default status
affected- Package
- rhelai1/gemma-2-9b-it
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux AI (RHEL AI)
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux AI (RHEL AI)
- Platforms
- Unknown
- Default status
affected- Package
- rhelai1/gemma-2-9b-it-fp8
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux AI (RHEL AI)
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux AI (RHEL AI)
- Platforms
- Unknown
- Default status
affected- Package
- rhelai1/granite-3.1-8b-lab-v1
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux AI (RHEL AI)
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux AI (RHEL AI)
- Platforms
- Unknown
- Default status
affected- Package
- rhelai1/granite-3.1-8b-lab-v2.1
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux AI (RHEL AI)
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux AI (RHEL AI)
- Platforms
- Unknown
- Default status
affected- Package
- rhelai1/granite-3.1-8b-starter-v1
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux AI (RHEL AI)
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux AI (RHEL AI)
- Platforms
- Unknown
- Default status
affected- Package
- rhelai1/granite-3.1-8b-starter-v2.1
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux AI (RHEL AI)
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux AI (RHEL AI)
- Platforms
- Unknown
- Default status
affected- Package
- rhelai1/granite-7b-redhat-lab
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux AI (RHEL AI)
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux AI (RHEL AI)
- Platforms
- Unknown
- Default status
affected- Package
- rhelai1/granite-7b-starter
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux AI (RHEL AI)
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux AI (RHEL AI)
- Platforms
- Unknown
- Default status
affected- Package
- rhelai1/granite-8b-code-base
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux AI (RHEL AI)
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux AI (RHEL AI)
- Platforms
- Unknown
- Default status
affected- Package
- rhelai1/granite-8b-code-instruct
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux AI (RHEL AI)
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux AI (RHEL AI)
- Platforms
- Unknown
- Default status
affected- Package
- rhelai1/granite-8b-lab-v1
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux AI (RHEL AI)
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux AI (RHEL AI)
- Platforms
- Unknown
- Default status
affected- Package
- rhelai1/granite-8b-lab-v2-preview
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux AI (RHEL AI)
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux AI (RHEL AI)
- Platforms
- Unknown
- Default status
affected- Package
- rhelai1/granite-8b-starter-v1
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux AI (RHEL AI)
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux AI (RHEL AI)
- Platforms
- Unknown
- Default status
affected- Package
- rhelai1/instructlab-amd-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux AI (RHEL AI)
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux AI (RHEL AI)
- Platforms
- Unknown
- Default status
affected- Package
- rhelai1/instructlab-intel-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux AI (RHEL AI)
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux AI (RHEL AI)
- Platforms
- Unknown
- Default status
affected- Package
- rhelai1/instructlab-nvidia-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux AI (RHEL AI)
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux AI (RHEL AI)
- Platforms
- Unknown
- Default status
affected- Package
- rhelai1/knowledge-adapter-v3
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux AI (RHEL AI)
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux AI (RHEL AI)
- Platforms
- Unknown
- Default status
affected- Package
- rhelai1/mixtral-8x7b-instruct-v0-1
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux AI (RHEL AI)
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux AI (RHEL AI)
- Platforms
- Unknown
- Default status
affected- Package
- rhelai1/modelcar-docling-layout
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux AI (RHEL AI)
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux AI (RHEL AI)
- Platforms
- Unknown
- Default status
affected- Package
- rhelai1/modelcar-docling-tableformer
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux AI (RHEL AI)
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux AI (RHEL AI)
- Platforms
- Unknown
- Default status
affected- Package
- rhelai1/modelcar-gemma-2-9b-it
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux AI (RHEL AI)
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux AI (RHEL AI)
- Platforms
- Unknown
- Default status
affected- Package
- rhelai1/modelcar-gemma-2-9b-it-fp8
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux AI (RHEL AI)
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux AI (RHEL AI)
- Platforms
- Unknown
- Default status
affected- Package
- rhelai1/modelcar-granite-3-1-8b-lab-v1
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux AI (RHEL AI)
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux AI (RHEL AI)
- Platforms
- Unknown
- Default status
affected- Package
- rhelai1/modelcar-granite-3-1-8b-lab-v2
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux AI (RHEL AI)
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux AI (RHEL AI)
- Platforms
- Unknown
- Default status
affected- Package
- rhelai1/modelcar-granite-3-1-8b-lab-v2-1
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux AI (RHEL AI)
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux AI (RHEL AI)
- Platforms
- Unknown
- Default status
affected- Package
- rhelai1/modelcar-granite-3-1-8b-starter-v1
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux AI (RHEL AI)
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux AI (RHEL AI)
- Platforms
- Unknown
- Default status
affected- Package
- rhelai1/modelcar-granite-3-1-8b-starter-v2
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux AI (RHEL AI)
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux AI (RHEL AI)
- Platforms
- Unknown
- Default status
affected- Package
- rhelai1/modelcar-granite-3-1-8b-starter-v2-1
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux AI (RHEL AI)
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux AI (RHEL AI)
- Platforms
- Unknown
- Default status
affected- Package
- rhelai1/modelcar-granite-7b-redhat-lab
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux AI (RHEL AI)
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux AI (RHEL AI)
- Platforms
- Unknown
- Default status
affected- Package
- rhelai1/modelcar-granite-7b-starter
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux AI (RHEL AI)
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux AI (RHEL AI)
- Platforms
- Unknown
- Default status
affected- Package
- rhelai1/modelcar-granite-8b-code-base
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux AI (RHEL AI)
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux AI (RHEL AI)
- Platforms
- Unknown
- Default status
affected- Package
- rhelai1/modelcar-granite-8b-code-instruct
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux AI (RHEL AI)
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux AI (RHEL AI)
- Platforms
- Unknown
- Default status
affected- Package
- rhelai1/modelcar-granite-8b-lab-v1
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux AI (RHEL AI)
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux AI (RHEL AI)
- Platforms
- Unknown
- Default status
affected- Package
- rhelai1/modelcar-granite-8b-lab-v2-preview
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux AI (RHEL AI)
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux AI (RHEL AI)
- Platforms
- Unknown
- Default status
affected- Package
- rhelai1/modelcar-granite-8b-starter-v1
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux AI (RHEL AI)
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux AI (RHEL AI)
- Platforms
- Unknown
- Default status
affected- Package
- rhelai1/modelcar-knowledge-adapter-v3
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux AI (RHEL AI)
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux AI (RHEL AI)
- Platforms
- Unknown
- Default status
affected- Package
- rhelai1/modelcar-mixtral-8x7b-instruct-v0-1
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux AI (RHEL AI)
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux AI (RHEL AI)
- Platforms
- Unknown
- Default status
affected- Package
- rhelai1/modelcar-prometheus-8x7b-v2-0
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux AI (RHEL AI)
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux AI (RHEL AI)
- Platforms
- Unknown
- Default status
affected- Package
- rhelai1/modelcar-skills-adapter-v3
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux AI (RHEL AI)
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux AI (RHEL AI)
- Platforms
- Unknown
- Default status
affected- Package
- rhelai1/modelcar-snowflake-arctic-embed-l-v2.0
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux AI (RHEL AI)
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux AI (RHEL AI)
- Platforms
- Unknown
- Default status
affected- Package
- rhelai1/pathservice-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux AI (RHEL AI)
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux AI (RHEL AI)
- Platforms
- Unknown
- Default status
affected- Package
- rhelai1/prometheus-8x7b-v2-0
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux AI (RHEL AI)
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux AI (RHEL AI)
- Platforms
- Unknown
- Default status
affected- Package
- rhelai1/skills-adapter-v3
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux AI (RHEL AI)
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux AI (RHEL AI)
- Platforms
- Unknown
- Default status
affected- Package
- rhelai1/ui-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.