CVE-2026-116172

The vLLM library (versions 0.22.0 to before 0.24.0 ) is vulnerable to a Denial of Service (DoS) attack due to improper input validation in the Rust gRPC converter . A remote attacker can bypass max_logprobs limits by sending Generate or GenerateStream requests containing oversized or integer-wrap...