[ CVE-2026-105757 · Published 5 Oct 2026 ]
vLLM: Structured-output request errors escape the request boundary and terminate the shared EngineCore — engine-fatal denial of service (3 sites)
CVSS 6.5
EPSS <1%1 agency advisoryFix available
[ Description ]Official description
vLLM is an inference and serving engine for large language models. Prior to 0.30.0, structured-output request failures can escape request-scoped validation and reach the EngineCore fatal-error path. A per-request backend mismatch can re-raise a grammar compilation exception, padding produced by the ngram_gpu speculative-decoding mode can pass a negative token to guidance validation, and the Rust frontend can admit empty structured-output values that the Python frontend rejects, allowing ordinary constrained-generation requests to terminate the shared engine. This issue is fixed in version 0.30.0.
[ Fixes ]Fixes and patches
- vllm 0.30.0Fixed version · GitHub Advisories · pip package vllm: upgrade to 0.30.0 or later (affected < 0.30.0)
- Patch on github.comVendor patch or bulletin · NVD · Reference tagged 'Patch' by NVD
- Patch on github.comVendor patch or bulletin · NVD · Reference tagged 'Patch' by NVD
[ Advisories ]Government CERT advisories
-
BSI CERT-BundWID-SEC-2026-3564
vllm: Multiple vulnerabilities Translated from German
[ Packages ]Affected open-source packages
- vllm pipAffected < 0.30.0 · fixed in 0.30.0 · GHSA-85xf-c7hm-whqw
[ References ]References
- github.com/vllm-project/vllm/commit/c55e15a44ec4127832d4a86928a356fdd9e68dbdPatch
- github.com/vllm-project/vllm/pull/51450Issue TrackingPatch
- github.com/vllm-project/vllm/releases/tag/v0.30.0Release Notes
- github.com/vllm-project/vllm/security/advisories/GHSA-85xf-c7hm-whqwMitigationVendor Advisory