CVE-2024-8768High· 7.5▾ TwilightvLLM denial of service vulnerability
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 8.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via OSV
Last analysed / modified upstream
0.7%
0.7% → 0.7%
A flaw was found in the vLLM library. A completions API request with an empty prompt will crash the vLLM API server, resulting in a denial of service.
vllm < 0.5.5Upgrade to a patched release:
vllm 0.5.5Connected by shared product, vendor, weakness, or advisory.
CVE-2026-69147Medium· 6.5vLLM is an inference and serving engine for large language models
CVE-2026-57173Medium· 6.5vLLM is an inference and serving engine for large language models
CVE-2026-73558Medium· 5.3vLLM is an inference and serving engine for large language models
CVE-2026-73560Medium· 6.5vLLM is an inference and serving engine for large language models
CVE-2026-71486Medium· 4.3vLLM is an inference and serving engine for large language models
CVE-2026-73555Medium· 5.3vLLM is an inference and serving engine for large language models