CVE-2026-73556 | vllm-project vLLM up to 0.25.x lm-format-enforcer backend backend_lm_format_enforcer.py structured_outputs.regex incorrect regex (WID-SEC-2026-2842)

A vulnerability described as problematic has been identified in vllm-project vLLM up to 0.25.x. This issue affects the function validate_structured_output_request_lm_format_enforcer of the file vllm/v1/structured_output/backend_lm_format_enforcer.py of the component lm-format-enforcer backend. The manipulation of the argument...