{"id":"CVE-2026-34756","state":"PUBLISHED","title":"vLLM Affected by Unauthenticated OOM Denial of Service via Unbounded `n` Parameter in OpenAI API Server","description":"vLLM is an inference and serving engine for large language models (LLMs). From 0.1.0 to before 0.19.0, a Denial of Service vulnerability exists in the vLLM OpenAI-compatible API server. Due to the lack of an upper bound validation on the n parameter in the ChatCompletionRequest and CompletionRequest Pydantic models, an unauthenticated attacker can send a single HTTP request with an astronomically large n value. This completely blocks the Python asyncio event loop and causes immediate Out-Of-Memory crashes by allocating millions of request object copies in the heap before the request even reaches the scheduling queue. This vulnerability is fixed in 0.19.0.","publishedAt":"2026-04-06T15:40:03.448Z","updatedAt":"2026-08-25T12:05:38.979Z","severity":{"score":6.5,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","source":"GitHub_M"},"assigner":"GitHub_M","products":["vllm-project vllm"],"affected":[{"vendor":"vllm-project","product":"vllm","versions":[{"version":">= 0.1.0, < 0.19.0","status":"affected"}]}],"references":["https://github.com/vllm-project/vllm/security/advisories/GHSA-3mwp-wvh9-7528","https://github.com/vllm-project/vllm/pull/37952","https://github.com/vllm-project/vllm/commit/b111f8a61f100fdca08706f41f29ef3548de7380","https://access.redhat.com/security/cve/CVE-2026-34756","https://bugzilla.redhat.com/show_bug.cgi?id=2455425","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34756.json","https://access.redhat.com/errata/RHSA-2026:36005","https://access.redhat.com/errata/RHSA-2026:36006","https://access.redhat.com/errata/RHSA-2026:57380","https://access.redhat.com/errata/RHSA-2026:57389","https://access.redhat.com/errata/RHSA-2026:57390","https://access.redhat.com/errata/RHSA-2026:57387","https://access.redhat.com/errata/RHSA-2026:59151","https://access.redhat.com/errata/RHSA-2026:59144"],"weaknesses":["CWE-770","CWE-1284"],"ingestedAt":"2026-10-29T20:11:40.391Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/34xxx/CVE-2026-34756.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-34756","state":"PUBLISHED","datePublished":"2026-04-06T15:40:03.448Z","dateUpdated":"2026-08-25T12:05:38.979Z","assignerShortName":"GitHub_M","assignerOrgId":"a0819718-46f1-4df5-94e2-005712e83aaa","dateReserved":"2026-03-30T19:17:10.225Z"},"containers":{"cna":{"title":"vLLM Affected by Unauthenticated OOM Denial of Service via Unbounded `n` Parameter in OpenAI API Server","descriptions":[{"lang":"en","value":"vLLM is an inference and serving engine for large language models (LLMs). From 0.1.0 to before 0.19.0, a Denial of Service vulnerability exists in the vLLM OpenAI-compatible API server. Due to the lack of an upper bound validation on the n parameter in the ChatCompletionRequest and CompletionRequest Pydantic models, an unauthenticated attacker can send a single HTTP request with an astronomically large n value. This completely blocks the Python asyncio event loop and causes immediate Out-Of-Memory crashes by allocating millions of request object copies in the heap before the request even reaches the scheduling queue. This vulnerability is fixed in 0.19.0."}],"affected":[{"vendor":"vllm-project","product":"vllm","versions":[{"version":">= 0.1.0, < 0.19.0","status":"affected"}]}],"references":[{"url":"https://github.com/vllm-project/vllm/security/advisories/GHSA-3mwp-wvh9-7528","name":"https://github.com/vllm-project/vllm/security/advisories/GHSA-3mwp-wvh9-7528","tags":["x_refsource_CONFIRM"]},{"url":"https://github.com/vllm-project/vllm/pull/37952","name":"https://github.com/vllm-project/vllm/pull/37952","tags":["x_refsource_MISC"]},{"url":"https://github.com/vllm-project/vllm/commit/b111f8a61f100fdca08706f41f29ef3548de7380","name":"https://github.com/vllm-project/vllm/commit/b111f8a61f100fdca08706f41f29ef3548de7380","tags":["x_refsource_MISC"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-770","lang":"en","description":"CWE-770: Allocation of Resources Without Limits or Throttling","type":"CWE"}]}],"providerMetadata":{"shortName":"GitHub_M","orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","dateUpdated":"2026-04-06T15:40:03.448Z"},"source":{"advisory":"GHSA-3mwp-wvh9-7528","discovery":"UNKNOWN"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-04-07T14:16:25.517505Z","id":"CVE-2026-34756","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-04-07T14:17:12.597Z"}},{"title":"vllm: vLLM: Denial of Service via excessively large 'n' parameter in OpenAI-compatible API","descriptions":[{"lang":"en","value":"A flaw was found in vLLM, an inference and serving engine for large language models (LLMs). An unauthenticated attacker can exploit this vulnerability by sending a specially crafted HTTP request with an excessively large 'n' parameter to the vLLM OpenAI-compatible API server. This can lead to a Denial of Service (DoS) by consuming excessive memory and blocking the system's event loop, causing the server to crash."}],"affected":[{"vendor":"Red Hat","product":"Red Hat AI Inference Server 3.2","packageName":"rhaiis/vllm-cuda-rhel9","defaultStatus":"affected","versions":[{"version":"1782951012","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:ai_inference_server:3.2::el9"]},{"vendor":"Red Hat","product":"Red Hat AI Inference Server 3.2","packageName":"rhaiis/vllm-rocm-rhel9","defaultStatus":"affected","versions":[{"version":"1782951244","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:ai_inference_server:3.2::el9"]},{"vendor":"Red Hat","product":"Red Hat AI Inference Server 3.4","packageName":"rhaii/vllm-cpu-rhel9","defaultStatus":"affected","versions":[{"version":"1787151769","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:ai_inference_server:3.4::el9"]},{"vendor":"Red Hat","product":"Red Hat AI Inference Server 3.4","packageName":"rhaii/vllm-spyre-rhel9","defaultStatus":"affected","versions":[{"version":"1787151840","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:ai_inference_server:3.4::el9"]},{"vendor":"Red Hat","product":"Red Hat AI Inference Server 3.4","packageName":"rhaii/vllm-cuda-rhel9","defaultStatus":"affected","versions":[{"version":"1787151771","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:ai_inference_server:3.4::el9"]},{"vendor":"Red Hat","product":"Red Hat AI Inference Server 3.4","packageName":"rhaii/vllm-rocm-rhel9","defaultStatus":"affected","versions":[{"version":"1787151774","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:ai_inference_server:3.4::el9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux AI 3.4","packageName":"rhelai3/disk-image-cuda-rhel9","defaultStatus":"affected","versions":[{"version":"1787310717","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:enterprise_linux_ai:3.4::el9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux AI 3.4","packageName":"rhelai3/bootc-aws-cuda-rhel9","defaultStatus":"affected","versions":[{"version":"1787253912","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:enterprise_linux_ai:3.4::el9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux AI 3.4","packageName":"rhelai3/bootc-azure-cuda-rhel9","defaultStatus":"affected","versions":[{"version":"1787253989","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:enterprise_linux_ai:3.4::el9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux AI 3.4","packageName":"rhelai3/bootc-azure-rocm-rhel9","defaultStatus":"affected","versions":[{"version":"1787254059","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:enterprise_linux_ai:3.4::el9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux AI 3.4","packageName":"rhelai3/bootc-cuda-rhel9","defaultStatus":"affected","versions":[{"version":"1787243961","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:enterprise_linux_ai:3.4::el9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux AI 3.4","packageName":"rhelai3/bootc-gcp-cuda-rhel9","defaultStatus":"affected","versions":[{"version":"1787253774","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:enterprise_linux_ai:3.4::el9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux AI 3.4","packageName":"rhelai3/bootc-rocm-rhel9","defaultStatus":"affected","versions":[{"version":"1787244006","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:enterprise_linux_ai:3.4::el9"]},{"vendor":"Red Hat","product":"Red Hat AI Inference Server","packageName":"rhaiis/vllm-neuron-rhel9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ai_inference_server:3"]},{"vendor":"Red Hat","product":"Red Hat AI Inference Server","packageName":"rhaiis/vllm-tpu-rhel9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ai_inference_server:3"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","packageName":"rhoai/odh-kserve-agent-rhel9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_ai"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","packageName":"rhoai/odh-kserve-controller-rhel9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_ai"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","packageName":"rhoai/odh-kserve-router-rhel9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_ai"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","packageName":"rhoai/odh-kserve-storage-initializer-rhel9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_ai"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","packageName":"rhoai/odh-vllm-cpu-rhel9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_ai"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","packageName":"rhoai/odh-vllm-cuda-rhel9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_ai"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","packageName":"rhoai/odh-vllm-gaudi-rhel9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_ai"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","packageName":"rhoai/odh-vllm-rocm-rhel9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_ai"]}],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-34756","tags":["vdb-entry","x_refsource_REDHAT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2455425","name":"RHBZ#2455425","tags":["issue-tracking","x_refsource_REDHAT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34756.json","tags":["x_sadp-csaf-vex"]},{"url":"https://access.redhat.com/errata/RHSA-2026:36005","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:36006","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:57380","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:57389","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:57390","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:57387","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:59151","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:59144","tags":["vendor-advisory","x_refsource_REDHAT"]}],"metrics":[{"other":{"content":{"namespace":"https://access.redhat.com/security/updates/classification/","value":"Important"},"type":"Red Hat severity rating"}},{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"format":"CVSS"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-1284","description":"Improper Validation of Specified Quantity in Input","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"redhat-SADP","orgId":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","dateUpdated":"2026-08-25T12:05:38.979Z"},"datePublic":"2026-04-06T15:40:03.448Z","solutions":[{"lang":"en","value":"RHSA-2026:36005: Red Hat AI Inference Server 3.2"},{"lang":"en","value":"RHSA-2026:36006: Red Hat AI Inference Server 3.2"},{"lang":"en","value":"RHSA-2026:57380: Red Hat AI Inference Server 3.4"},{"lang":"en","value":"RHSA-2026:57389: Red Hat AI Inference Server 3.4"},{"lang":"en","value":"RHSA-2026:57390: Red Hat AI Inference Server 3.4"},{"lang":"en","value":"RHSA-2026:57387: Red Hat AI Inference Server 3.4"},{"lang":"en","value":"RHSA-2026:59151: Red Hat Enterprise Linux AI 3.4"},{"lang":"en","value":"RHSA-2026:59144: Red Hat Enterprise Linux AI 3.4"}],"timeline":[{"lang":"en","time":"2026-04-06T16:03:45.222Z","value":"Reported to Red Hat."},{"lang":"en","time":"2026-04-06T15:40:03.448Z","value":"Made public."}],"workarounds":[{"lang":"en","value":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}],"x_adpType":"supplier","x_generator":{"engine":"sadp-cli 1.0.0"}}]}}}