Denial of Service (DoS)

Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Denial of Service DoS through the MoRIIOWrapper.handlereleasemessage process. An attacker can cause excessive resource usage by manipulating the...

CVE-2026-92220 vllm-project vLLM MoRIIO Acknowledgement moriio_connector.py MoRIIOWrapper._handle_release_message resource consumption

A vulnerability was found in vllm-project vLLM 0.26.0/0.27.0. Affected is the function MoRIIOConnectorScheduler.requestfinished/MoRIIOConnectorWorker.getfinished/MoRIIOWrapper.handlereleasemessage of the file vllm/distributed/kvtransfer/kvconnector/v1/moriio/moriioconnector.py of the component...