CVE-2026-116174: vllm vllm

CVSS 8.2 (high) · published 2026-10-25

vLLM from 0.22.0 before 0.24.0 contains an improper input validation vulnerability in the Rust gRPC Generate and GenerateStream service that forwards unchecked prompt token IDs to EngineCore. Attackers can submit requests with out-of-vocabulary prompt.token_ids values to trigger a fatal embedding lookup failure that terminates EngineCore and leaves the server unhealthy.

Affected products (NVD): vllm vllm

Fixed in (NVD): 0.24.0

Weakness: CWE-20

Source: NVD CVE-2026-116174

References

• https://github.com/vllm-project/vllm/security/advisories/GHSA-w2v2-5662-8v5q
• https://www.vulncheck.com/advisories/vllm-0.22.0-before-0.24.0-denial-of-service-via-rust-grpc-generate

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.