[Auto-Update] vllm 0.25.1 (#6400)

* [Auto-Update] vllm 0.25.1

* security(vllm): allowlist CVE-2026-24747 (stale torch pin in benchmarks reqs)

Finding is torch 2.9.1 pinned in the upstream base image's
benchmarks/requirements.txt, not the installed package (torch 2.11.0,
>= 2.10.0 fix). The weights_only unpickler RCE needs a malicious
checkpoint load; the benchmark reqs file is inert metadata. Ubuntu-only
(amzn2023/omni build from source and don't ship this file).

---------

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: Kevin Wang <kwanggg@amazon.com>

Author: 3 people

.github/config/image/vllm/ec2-ubuntu.yml

@@ -3,7 +3,7 @@ image:
   description: "vLLM for EC2 instances (Ubuntu, upstream base image)"
 metadata:
   framework: "vllm"
-  framework_version: "0.25.0"
+  framework_version: "0.25.1"
   os_version: "ubuntu22.04"
   customer_type: "ec2"
   arch_type: "x86"
@@ -13,7 +13,7 @@ metadata:
 build:
   dockerfile: "docker/vllm/Dockerfile"
   target: "vllm-ec2"
-  base_image: "vllm/vllm-openai:v0.25.0"
+  base_image: "vllm/vllm-openai:v0.25.1"
   python_version: "3.12"
   cuda_version: "13.0.2"
   efa_version: "1.47.0"

.github/config/image/vllm/sagemaker-ubuntu.yml

@@ -3,7 +3,7 @@ image:
   description: "vLLM for SageMaker (Ubuntu, upstream base image)"
 metadata:
   framework: "vllm"
-  framework_version: "0.25.0"
+  framework_version: "0.25.1"
   os_version: "ubuntu22.04"
   customer_type: "sagemaker"
   platform: "sagemaker"
@@ -14,7 +14,7 @@ metadata:
 build:
   dockerfile: "docker/vllm/Dockerfile"
   target: "vllm-sagemaker"
-  base_image: "vllm/vllm-openai:v0.25.0"
+  base_image: "vllm/vllm-openai:v0.25.1"
   python_version: "3.12"
   cuda_version: "13.0.2"
   efa_version: "1.47.0"

docker/vllm/Dockerfile

@@ -1,6 +1,6 @@
 # Declare the argument as default to use as input
 # base image: https://hub.docker.com/r/vllm/vllm-openai/tags
-ARG BASE_IMAGE=vllm/vllm-openai:v0.25.0
+ARG BASE_IMAGE=vllm/vllm-openai:v0.25.1
 
 # Use input argument as base image
 FROM $BASE_IMAGE AS base

test/security/data/ecr_scan_allowlist/vllm/framework_allowlist.json

@@ -1,4 +1,9 @@
 [
+    {
+        "vulnerability_id": "CVE-2026-24747",
+        "reason": "torch 2.9.1 is only a version pin in the upstream vllm/vllm-openai base image's benchmarks/requirements.txt (benchmark metadata), not the installed package. Installed torch is 2.11.0 (>= 2.10.0 fix). weights_only unpickler RCE requires loading a malicious checkpoint; the benchmark requirements file is inert. Not exploitable in the runtime.",
+        "review_by": "2026-09-25"
+    },
     {
         "vulnerability_id": "CVE-2026-39822",
         "reason": "go/stdlib 1.25.9 statically linked inside mooncake libetcd_wrapper.so, cannot be patched independently of mooncake-transfer-engine rebuild",