Red Hat Enterprise Linux AI (RHEL AI) vulnerabilities

2 known vulnerabilities in Red Hat Enterprise Linux AI (RHEL AI) from Red Hat. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  Red Hat AI Inference Server: Server-Side Request Forgery

  CVE-2025-6242Oct 7, 2025Red Hat

  A Server-Side Request Forgery (SSRF) vulnerability exists in the MediaConnector class within the vLLM project's multimodal feature set. The load_from_url and load_from_url_async methods fetch and process media from user-provided URLs without adequate restricti

• 7.5 High severity

  Red Hat Enterprise Linux AI (RHEL AI): Reachable Assertion

  CVE-2024-8768Sep 17, 2024Red Hat

  A flaw was found in the vLLM library. A completions API request with an empty prompt will crash the vLLM API server, resulting in a denial of service.