Skip to content
CVE PROGRAM SOURCE RECORD8.2 High

CVE-2026-100652

vLLM 0.22.0 through 0.23.0 Denial of Service via stop_token_ids

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

vLLM versions 0.22.0 through 0.23.0 fail to validate stop_token_ids against vocabulary bounds in Rust HTTP and gRPC frontends, allowing out-of-vocabulary token IDs to reach MinTokensLogitsProcessor. Attackers can submit requests with min_tokens greater than zero and out-of-vocabulary stop_token_ids to trigger CUDA tensor indexing failures that leave EngineCore in a fatal state requiring service restart.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

vllm-project vllm

Default version status: unaffected

  • 0.22.0 to < 0.24.0affected
  • 0.24.0unaffected
pkg:pypi/vllm

References