Vulnerability in vllm-project vllm

[ Description ]Official description

vLLM from 0.22.0 before 0.24.0 contains an improper input validation vulnerability in the Rust gRPC Generate and GenerateStream service that forwards unchecked prompt token IDs to EngineCore. Attackers can submit requests with out-of-vocabulary prompt.token_ids values to trigger a fatal embedding lookup failure that terminates EngineCore and leaves the server unhealthy.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

• BSI CERT-Bund25 Oct 2026WID-SEC-2026-4151

  vllm: Multiple vulnerabilities allow denial of service Translated from German

  CVE-2026-116175CVE-2026-116174CVE-2026-116181

[ References ]References

• github.com/vllm-project/vllm/security/advisories/GHSA-w2v2-5662-8v5qMitigationVendor Advisory
• www.vulncheck.com/advisories/vllm-0.22.0-before-0.24.0-denial-of-service-via-rust-grpc-…Third Party Advisory