CVE-2026-73557

vLLM is an inference and serving engine for large language models. From 0.20.2rc0 until 0.26.0, safeloadpromptembeds in vllm/renderers/embedutils.py uses torch.sparse.checksparsetensorinvariants, whose process-global save, enable, and restore state can be raced by concurrent promptembeds parts...

PT-2026-71672

Name of the Vulnerable Software and Affected Versions vLLM versions 0.20.2rc0 through 0.25.x Description A race condition exists in the safe load prompt embeds function within vllm/renderers/embed utils.py when enable prompt embeds is enabled. The issue occurs because torch.sparse.check sparse...