CVE-2025-9141

Description

vLLM has remote code execution vulnerability in the tool call parser for Qwen3-Coder

Predictions

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

References

• https://github.com/vllm-project/vllm/security/advisories/GHSA-79j6-g2m3-jgfw
• https://github.com/vllm-project/vllm/pull/21396
• https://github.com/vllm-project/vllm/commit/4594fc3b281713bd3d7634405b4a1393af40d294
• https://github.com/vllm-project/vllm

💬 Discuss CVE-2025-9141 on VIR Community →

Community-verified mitigations for this CVE will appear above when contributors publish them.