CVE-2026-100651

vLLM versions before 0.29.0 are vulnerable to a Denial of Service (DoS) due to a lack of decoder prompt-length validation on the disaggregated serving endpoint (/inference/v1/generate). When handling multimodal payloads (e.g., Nemotron Parse , Whisper , and FireRedLID ), the system fails to check...

CVE-2026-100651 vllm before 0.29.0 Denial of Service via Decoder Prompt Length Bypass

vLLM before 0.29.0 fails to enforce decoder prompt-length validation on the disaggregated serving endpoint /inference/v1/generate. When the request contains a 'features' multimodal payload, vllm/entrypoints/serve/disagg/serving.py builds a multimodal EngineInput directly from the caller-supplied...