Vulnerability Description
vLLM from 0.22.0 before 0.24.0 contains an improper input validation vulnerability in the Rust gRPC Generate and GenerateStream service that forwards unchecked prompt token IDs to EngineCore. Attackers can submit requests with out-of-vocabulary prompt.token_ids values to trigger a fatal embedding lookup failure that terminates EngineCore and leaves the server unhealthy.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Vllm | Vllm | >= 0.22.0, < 0.24.0 |
Related Weaknesses (CWE)
References
- https://github.com/vllm-project/vllm/security/advisories/GHSA-w2v2-5662-8v5qMitigationVendor Advisory
- https://www.vulncheck.com/advisories/vllm-0.22.0-before-0.24.0-denial-of-serviceThird Party Advisory
FAQ
What is CVE-2026-116174?
CVE-2026-116174 is a vulnerability with a CVSS score of 5.9 (MEDIUM). vLLM from 0.22.0 before 0.24.0 contains an improper input validation vulnerability in the Rust gRPC Generate and GenerateStream service that forwards unchecked prompt token IDs to EngineCore. Attacker...
How severe is CVE-2026-116174?
CVE-2026-116174 has been rated MEDIUM with a CVSS base score of 5.9/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-116174?
Check the references section above for vendor advisories and patch information. Affected products include: Vllm Vllm.