CVE-2026-116178
vLLM from 0.20.0 before 0.30.0 contains a denial of service vulnerability that allows remote…
- Risk score
- 40/100
- CVSS
- 5.9 v3.1
- Exploit chance (30 days)
- 0.3%
- Published
- 25 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- vLLM from 0.20.0 before 0.30.0 contains a denial of service vulnerability that allows remote attackers to crash the engine by sending inconsistent multimodal metadata to the disaggregated /inference/v1/generate endpoint. Attackers can replay a valid multimodal item with repeated or overlapping mm_placeholders ranges o…
- Affected
- See advisory
- Fix
- Upgrade the product to 0.30.0 or later.
- Exploitation
- No known exploitation
Why it is Yellow
- CVSS 5.9 medium
References
Original description
vLLM from 0.20.0 before 0.30.0 contains a denial of service vulnerability that allows remote attackers to crash the engine by sending inconsistent multimodal metadata to the disaggregated /inference/v1/generate endpoint. Attackers can replay a valid multimodal item with repeated or overlapping mm_placeholders ranges or mismatched kwargs_data and mm_hashes lists, producing a negative text span in Qwen2.5-VL position construction that terminates the engine.
Last activity 25 Oct 2026. Patch Forecast updates every hour.