CVE-2026-94622

A flaw was found in vLLM. A remote attacker can exploit this vulnerability by sending requests with incomplete kvtransferparams dictionary entries to the NIXL connector's metadata handling. This can trigger an uncaught error in the EngineCore scheduling, leading to the termination of the decode...