biondizzle/vllm
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity

(security) Fix SSRF in batch runner download_bytes_from_url (#38482)

Browse Source 
Signed-off-by: jperezde <jperezde@redhat.com>
This commit is contained in:
Juan Pérez de Algaba
2026-03-30 09:10:01 +02:00
committed by GitHub
parent ac30a8311e
commit 57861ae48d
3 changed files with 183 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
docs/usage/security.md
View File

@@ -66,6 +66,10 @@ Restrict domains that vLLM can access for media URLs by setting
`--allowed-media-domains` to prevent Server-Side Request Forgery (SSRF) attacks.
(e.g. `--allowed-media-domains upload.wikimedia.org github.com www.bogotobogo.com`)
This protection applies to both the online serving API (multimodal inputs) and
the **batch runner** (`vllm run-batch`), where `file_url` values in batch
transcription/translation requests are validated against the same allowlist.
Without domain restrictions, a malicious user could supply URLs that:
- **Target internal services**: Access internal network endpoints, cloud metadata