{"schema":"threatline.record/2","record":{"id":"CVE-2026-115915","aliases":["GHSA-h3rc-j82p-2c3h"],"summary":"vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCE","details":"vLLM is an inference and serving engine for large language models. Prior to 0.32.0, ImageMediaIO passes attacker-controlled image bytes to Pillow through Image.open(BytesIO(data)) without restricting decoder selection, and the MIME label does not constrain the selected format. Image-capable request paths through parse_image() and fetch_image() can therefore dispatch an EPS payload to host components. A host with Ghostscript affected by CVE-2024-29510 can execute commands with the vLLM process's privileges, while environments using Pillow 12.0.0 through 12.2.0 can trigger CVE-2026-59203 and exhaust media-loading workers. Deployments without the applicable vulnerable dependency are not affected by that corresponding impact. This issue is fixed in version 0.32.0.","categories":["Unclassified"],"product":"vllm","vendor":"vllm-project","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-115915","source_modified_at":"2026-10-26T17:16:57.526Z","fetched_at":"2026-10-26T19:10:57.178988Z","product":"vllm","vendor":"vllm-project","versions":[{"version":"< 0.32.0","status":"affected"}],"defaultStatus":null}],"fixed_versions":[],"cvss":8.1,"severity":"High","kev":{"listed":false},"epss":{"probability":null,"percentile":null,"score_date":null},"published_at":"2026-10-26T17:16:06.387Z","modified_at":"2026-10-26T17:16:57.526Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-115915","fetched_at":"2026-10-26T19:10:57.178988Z","source_modified_at":"2026-10-26T17:16:57.526Z"}],"sources":["CVE List"],"references":[{"source":"CVE List","url":"https://github.com/vllm-project/vllm/security/advisories/GHSA-h3rc-j82p-2c3h","tags":["x_refsource_CONFIRM"]},{"source":"CVE List","url":"https://github.com/vllm-project/vllm/pull/60022","tags":["x_refsource_MISC"]},{"source":"CVE List","url":"https://github.com/vllm-project/vllm/commit/710ac56e691d4713feca50a43e6c440f07d373fd","tags":["x_refsource_MISC"]},{"source":"CVE List","url":"https://github.com/vllm-project/vllm/releases/tag/v0.32.0","tags":["x_refsource_MISC"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-26T17:16:57.526Z","content_hash":"9bf58fe655cb285ecafbd9af099b2d33841b437ea36781f9c4ad4f4283799c8e"}}