diff --git a/vllm-0.10.1.1.tar.gz b/vllm-0.10.1.1.tar.gz
new file mode 100644
index 0000000000000000000000000000000000000000..ffd6084212ed928ed09c7cd67e6e8bca45a72108
Binary files /dev/null and b/vllm-0.10.1.1.tar.gz differ
diff --git a/vllm.spec b/vllm.spec
index 3ebe76062fc164bf2a2807874c306f91d1f5c480..ac7c228651b6b46213c95a78528d1e52f1bbe763 100644
--- a/vllm.spec
+++ b/vllm.spec
@@ -2,7 +2,7 @@
 %global _description A high-throughput and memory-efficient inference and serving engine for LLMs
 
 Name:       vllm
-Version:    0.9.1
+Version:    0.10.1.1
 Release:    1
 Summary:    Powerful engine for LLMs
 License:    (Apache-2.0 AND BSD-3-Clause) OR BSD-3-CLause
@@ -69,6 +69,9 @@ mv %{buildroot}/filelist.lst .
 %files -n python3-%{_name} -f filelist.lst
 
 %changelog
+* Tue Sep 02 2025 Yu Peng <yupeng@kylinos.cn> - 0.10.1.1-1
+- Upgrade to 0.10.1.1 and fix CVE-2025-48956 
+
 * Fri Jul 4 2025 gongzequn<gongzequn1@huawei.com> - 0.9.1-1
 - Change the baseline version to 0.9.1