Red Hat Enterprise Linux Ai Rhel Ai vulnerabilities

6 CVEs affecting Red Hat Enterprise Linux Ai Rhel Ai, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-6242, published 2025-10-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-8768, published 2024-09-17. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. A flaw was found in the vLLM library. A completions API request with an empty prompt will crash the vLLM API server, resulting in a denial of service.
CVE-2025-8556, published 2025-08-06. Low severity, CVSS 3.7. EPSS: 0.5% chance of exploitation in the next 30 days. A flaw was found in CIRCL's implementation of the FourQ elliptic curve. This vulnerability allows an attacker to compromise session security via low-order point injection and incorrect point…
CVE-2024-11079, published 2024-11-12. Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days. A flaw was found in Ansible-Core. This vulnerability allows attackers to bypass unsafe content protections using the hostvars object to reference and execute templated content. This issue can lead to…
CVE-2024-8775, published 2024-09-14. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. A flaw was found in Ansible, where sensitive information stored in Ansible Vault files can be exposed in plaintext during the execution of a playbook. This occurs when using tasks such as…
CVE-2025-6242, published 2025-10-07. High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days. A Server-Side Request Forgery (SSRF) vulnerability exists in the MediaConnector class within the vLLM project's multimodal feature set. The load_from_url and load_from_url_async methods fetch and…
CVE-2024-8939, published 2024-09-17. Medium severity, CVSS 6.2. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability was found in the ilab model serve component, where improper handling of the best_of parameter in the vllm JSON web API can lead to a Denial of Service (DoS). The API used for…