CVE-2026-116176High· 8.2▾ TwilightvLLM from 0.9.2 before 0.24.0 contains a server-side request forgery vulnerability that allows API callers to force outbound connections by embedding a decode address in the X-Request-Id header. Attackers can make a P2pNcclConnector pref…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 45.1 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
vLLM from 0.9.2 before 0.24.0 contains a server-side request forgery vulnerability that allows API callers to force outbound connections by embedding a decode address in the X-Request-Id header. Attackers can make a P2pNcclConnector prefill worker ZMQ-connect to an attacker host, leaking the NCCL unique_id and KV-cache tensors or blocking the worker.
vllm >= 0.9.2 < 0.24.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-73560Medium· 6.5vLLM is an inference and serving engine for large language models
CVE-2026-24779High· 7.1vLLM is an inference and serving engine for large language models (LLMs)
CVE-2026-116172Medium· 5.9vLLM 0.22.0 before 0.24.0 DoS via Rust gRPC CandidateTokens.top_n
CVE-2026-116175Medium· 6.5vLLM 0.19.0 before 0.24.0 Audio Decompression Bomb DoS via Chat Completions
CVE-2026-116174Medium· 5.9vLLM 0.22.0 before 0.24.0 Denial of Service via Rust gRPC Generate
CVE-2026-116173Medium· 5.9vLLM 0.22.0 before 0.24.0 Denial of Service via gRPC output_candidates.token_ids