Aller au contenu
en Se connecter
7.1 Élevée

CVE-2026-116181 vLLM from 0.20.1 before 0.29.0 contains an improper input validation vulnerability that allows remote attackers to crash…

Description

vLLM from 0.20.1 before 0.29.0 contains an improper input validation vulnerability that allows remote attackers to crash the engine by supplying out-of-vocabulary stop_token_ids. Attackers can send OpenAI chat, completion, generate, or batch requests with invalid IDs to terminate the engine or write outside the V2 runner's logits buffer.

Produits et versions touchés

Produit Versions touchées Corrigé en
vllm 0.29 premières → < 0.29.0 0.29.0
vllm 0.20 0.20.1 → < 0.29.0 0.29.0

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de vllm

Les 121 CVE de vllm →
CVE-2026-115918 vLLM is an inference and serving engine for large language models 6.5 Moyenne CVE-2026-115917 vLLM is an inference and serving engine for large language models 3.4 Faible CVE-2026-115916 vLLM is an inference and serving engine for large language models 6.5 Moyenne CVE-2026-115915 vLLM is an inference and serving engine for large language models 8.1 Élevée
Suivre cette CVE