4 matches found
CVE-2026-116181
vLLM from 0.20.1 before 0.29.0 contains an improper input validation vulnerability that allows remote attackers to crash the engine by supplying out-of-vocabulary stoptokenids. Attackers can send OpenAI chat, completion, generate, or batch requests with invalid IDs to terminate the engine or writ...
CVE-2026-116181
The vLLM library versions 0.20.1 before 0.29.0 are susceptible to an improper input validation vulnerability. Remote attackers can exploit this by supplying out-of-vocabulary stop_token_ids via OpenAI chat, completion, generate, or batch requests. This flaw can lead to a Denial of Service (DoS) b...
CVE-2026-116181 vLLM 0.20.1 before 0.29.0 DoS and GPU Out-of-Bounds Write via stop_token_ids
vLLM from 0.20.1 before 0.29.0 contains an improper input validation vulnerability that allows remote attackers to crash the engine by supplying out-of-vocabulary stoptokenids. Attackers can send OpenAI chat, completion, generate, or batch requests with invalid IDs to terminate the engine or writ...
EUVD-2026-109442
vLLM from 0.20.1 before 0.29.0 contains an improper input validation vulnerability that allows remote attackers to crash the engine by supplying out-of-vocabulary stoptokenids. Attackers can send OpenAI chat, completion, generate, or batch requests with invalid IDs to terminate the engine or writ...