CVE-2026-116173

A flaw was found in vLLM. A remote attacker can cause a Denial of Service DoS by sending a specially crafted request with an excessive number of candidate tokens to the service's gRPC interface. Due to missing input validation, processing this request triggers an unhandled internal exception that...