CVE-2026-116180High· 7.7▾ TwilightvLLM from 0.8.5 before 0.31.0 has a denial of service flaw. LogprobsTensors.empty_cpu() in vllm/v1/outputs.py allocates an uninitialized int32 tensor, and the V1 model runner leaves prompt positions reported as computed by a KV connector…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 42.4 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
vLLM from 0.8.5 before 0.31.0 has a denial of service flaw. LogprobsTensors.empty_cpu() in vllm/v1/outputs.py allocates an uninitialized int32 tensor, and the V1 model runner leaves prompt positions reported as computed by a KV connector unwritten. A client sharing the engine can send prompt_logprobs (or echo with logprobs) against a connector-cached prefix, making tokenizer decode raise OverflowError, which crashes EngineCore and drops all co-tenant requests.
vllm >= 0.8.5 < 0.31.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-116172Medium· 5.9vLLM 0.22.0 before 0.24.0 DoS via Rust gRPC CandidateTokens.top_n
CVE-2026-116175Medium· 6.5vLLM 0.19.0 before 0.24.0 Audio Decompression Bomb DoS via Chat Completions
CVE-2026-116174Medium· 5.9vLLM 0.22.0 before 0.24.0 Denial of Service via Rust gRPC Generate
CVE-2026-116173Medium· 5.9vLLM 0.22.0 before 0.24.0 Denial of Service via gRPC output_candidates.token_ids
CVE-2026-116179High· 7.5vLLM 0.18.0 before 0.31.0 Memory Exhaustion via media_io_kwargs num_frames Override
CVE-2026-116178Medium· 5.9vLLM 0.20.0 before 0.30.0 DoS via /inference/v1/generate mm_placeholders