CVE-2026-34756Medium· 6.5▾ SunlitvLLM is an inference and serving engine for large language models (LLMs). From 0.1.0 to before 0.19.0, a Denial of Service vulnerability exists in the vLLM OpenAI-compatible API server. Due to the lack of an upper bound validation on the…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 7.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.3%
0.3% → 0.4%
vLLM is an inference and serving engine for large language models (LLMs). From 0.1.0 to before 0.19.0, a Denial of Service vulnerability exists in the vLLM OpenAI-compatible API server. Due to the lack of an upper bound validation on the n parameter in the ChatCompletionRequest and CompletionRequest Pydantic models, an unauthenticated attacker can send a single HTTP request with an astronomically large n value. This completely blocks the Python asyncio event loop and causes immediate Out-Of-Memory crashes by allocating millions of request object copies in the heap before the request even reaches the scheduling queue. This vulnerability is fixed in 0.19.0.
vllm >= 0.1.0, < 0.19.0Upgrade past the affected range:
vllm 0.19.0Affected packages:
vllm >= 0.1.0, < 0.19.0Patched in:
vllm 0.19.0Connected by shared product, vendor, weakness, or advisory.
CVE-2026-34755Medium· 6.5vLLM is an inference and serving engine for large language models (LLMs)
CVE-2026-48746Critical· 9.1vLLM is an inference and serving engine for large language models (LLMs)
CVE-2026-69147Medium· 6.5vLLM is an inference and serving engine for large language models
CVE-2026-57173Medium· 6.5vLLM is an inference and serving engine for large language models
CVE-2026-71486Medium· 4.3vLLM is an inference and serving engine for large language models
CVE-2026-94624High· 7.5vLLM through 0.29.0 contains a denial of service vulnerability in P2P KV offloading when OffloadingConnector is configured with TieringOffloadingSpec and a peer-to-peer secondary tier