| Component | vLLM |
| Severity | medium (CVSS 5.9) |
| CVSS vector | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H |
| Published (NVD) | 2026-10-25 |
| Affected versions | >= 0.22.0, < 0.24.0 from the CVE Program record written by the CNA that assigned the CVE |
| Fixed in | 0.24.0 |
| Weakness | CWE-20 |
| CISA KEV | not listed |
NVD description
vLLM from 0.22.0 before 0.24.0 contains an improper input validation vulnerability in the Rust gRPC Generate and GenerateStream service that forwards unchecked prompt token IDs to EngineCore. Attackers can submit requests with out-of-vocabulary prompt.token_ids values to trigger a fatal embedding lookup failure that terminates EngineCore and leaves the server unhealthy.
What to do
- Upgrade vLLM to
0.24.0or later. - Do not expose the component's API or UI to the internet without authentication in front of it.
Sources
- NVD: CVE-2026-116174
- https://github.com/vllm-project/vllm/security/advisories/GHSA-w2v2-5662-8v5q
- https://www.vulncheck.com/advisories/vllm-0.22.0-before-0.24.0-denial-of-service-via-rust-grpc-generate