5 matches found
CVE-2026-116178
vLLM from 0.20.0 before 0.30.0 contains a denial of service vulnerability that allows remote attackers to crash the engine by sending inconsistent multimodal metadata to the disaggregated /inference/v1/generate endpoint. Attackers can replay a valid multimodal item with repeated or overlapping...
CVE-2026-116178
A flaw was found in vLLM. This vulnerability allows a remote attacker to cause a Denial of Service DoS by crashing the inference engine. By sending crafted requests with inconsistent or overlapping multimodal metadata to the inference endpoint, an attacker can trigger an internal processing error...
CVE-2026-116178
The vLLM library versions 0.20.0 to before 0.30.0 contains a denial of service vulnerability in the disaggregated /inference/v1/generate endpoint. The root cause is improper input validation of multimodal metadata; specifically, attackers can provide inconsistent mm_placeholders ranges or mismatc...
CVE-2026-116178 vLLM 0.20.0 before 0.30.0 DoS via /inference/v1/generate mm_placeholders
vLLM from 0.20.0 before 0.30.0 contains a denial of service vulnerability that allows remote attackers to crash the engine by sending inconsistent multimodal metadata to the disaggregated /inference/v1/generate endpoint. Attackers can replay a valid multimodal item with repeated or overlapping...
EUVD-2026-109439
vLLM from 0.20.0 before 0.30.0 contains a denial of service vulnerability that allows remote attackers to crash the engine by sending inconsistent multimodal metadata to the disaggregated /inference/v1/generate endpoint. Attackers can replay a valid multimodal item with repeated or overlapping...