Vulnerability Description
vLLM from 0.20.1 before 0.29.0 contains an improper input validation vulnerability that allows remote attackers to crash the engine by supplying out-of-vocabulary stop_token_ids. Attackers can send OpenAI chat, completion, generate, or batch requests with invalid IDs to terminate the engine or write outside the V2 runner's logits buffer.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Vllm | Vllm | >= 0.20.1, < 0.29.0 |
Related Weaknesses (CWE)
References
- https://github.com/vllm-project/vllm/security/advisories/GHSA-w9r6-29q4-pvprPatchVendor Advisory
- https://www.vulncheck.com/advisories/vllm-0.20.1-before-0.29.0-dos-and-gpu-out-oThird Party Advisory
FAQ
What is CVE-2026-116181?
CVE-2026-116181 is a vulnerability with a CVSS score of 6.5 (MEDIUM). vLLM from 0.20.1 before 0.29.0 contains an improper input validation vulnerability that allows remote attackers to crash the engine by supplying out-of-vocabulary stop_token_ids. Attackers can send Op...
How severe is CVE-2026-116181?
CVE-2026-116181 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-116181?
Check the references section above for vendor advisories and patch information. Affected products include: Vllm Vllm.