Vulnerability in vllm-project vLLM

[ Why it matters ]Priority signals

• Public proof-of-concept exploit exists (CISA SSVC)

[ Description ]Official description

A security flaw has been discovered in vllm-project vLLM up to 0.31.0. This impacts the function get_token_bin_counts_and_mask of the file vllm/model_executor/layers/utils.py of the component Penalty Handler. Performing a manipulation results in denial of service. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ References ]References

• gist.github.com/Yunzez/5c70a3bb328eaf6d646b9d31e879dc4aThird Party Advisory
• github.com/vllm-project/vllmProduct
• github.com/vllm-project/vllm/issues/57719Issue Tracking
• vuldb.com/cve/CVE-2026-105922Third Party Advisory
• vuldb.com/submit/992707Third Party Advisory
• vuldb.com/vuln/413896Third Party Advisory
• vuldb.com/vuln/413896/ctiPermissions Required