## vLLM: Responses API bypasses trust_request_chat_template for chat_template_kwargs

- 種別: advisory
- 重大度: medium
- 関連技術: python
- CVE: CVE-2026-115918
- 公開日時: 2026-10-28T21:14:59.000Z
- 情報源: GitHub Advisory Database (https://github.com/advisories/GHSA-x567-49g5-p4cf)
- パーマリンク: https://vulnpulse.app/items/ghsa-ghsa-x567-49g5-p4cf

影響: pip:vllm >= 0.16.0, < 0.32.0 → 0.32.0
vLLM's /v1/responses endpoint accepts request-level chat_template_kwargs, but does not apply the --trust-request-chat-template gate that protects Chat Completions, render, tokenize, and pooling paths. When the server is run with the documented default trust_request_chat_template=False and no explicit --chat-template, a Responses request can pass: json {"chat_template_kwargs": {"chat_template": " "}} That key is preserved by ChatParams.get_apply_chat_template_kwargs() and then bound as the chat_…