Skip to content
OpenAdvisories
Medium WID-SEC-2026-3507 6 CVEs

vllm: Mehrere Schwachstellen ermöglichen Denial of Service

Published Sep 21, 2026 · Updated Nov 9, 2026 · Revision 3 · de

Vendor: Red Hat Product: Enterprise Linux

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in vllm ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

Open Source vLLM ist eine Open-Source-Bibliothek für schnelle und effiziente Inferenz von Large Language Models (LLMs).

Vulnerabilities 6

  • High 7.5
    CVE-2026-94622

    vLLM through 0.29.0 Denial of Service via Incomplete NIXL KV Transfer Metadata

    vLLM versions through 0.29.0 contain a denial of service vulnerability in the NIXL connector's metadata handling for prefill/decode disaggregated deployments. Attackers can send requests with incomplete kv_transfer_params dictionary entries to trigger an unca…

    vLLM vLLM vllm PyPI
  • High 7.5
    CVE-2026-94623

    vLLM through 0.29.0 Denial of Service via NIXL Multi-Prompt Assertion Failure

    vLLM through 0.29.0 contains a denial of service vulnerability in the NIXL connector's prefix caching implementation that fails to properly validate block counts across multi-prompt completion requests in prefill/decode disaggregated deployments. Attackers ca…

    vLLM vLLM vllm PyPI
  • High 7.5
    CVE-2026-94624

    vLLM through 0.29.0 Denial of Service via Unbounded P2P KV Offloading Sessions

    vLLM through 0.29.0 contains a denial of service vulnerability in P2P KV offloading when OffloadingConnector is configured with TieringOffloadingSpec and a peer-to-peer secondary tier. Attackers can supply arbitrary remote host and port values in kv_transfer_…

    vLLM vLLM vllm PyPI
  • High 7.5
    CVE-2026-94626

    vLLM through 0.29.0 Memory Exhaustion via Unvalidated NIXL tp_size

    vLLM through 0.29.0 fails to validate the tp_size parameter in kv_transfer_params on OpenAI-compatible completion endpoints, allowing attackers to allocate unbounded memory. Attackers can supply arbitrary tp_size values in prefill/decode disaggregated deploym…

    vLLM vLLM vllm PyPI
  • High 7.5
    CVE-2026-94627

    vLLM through 0.29.0 GPU KV Cache Leak via Mooncake Transfer ID Collision

    vLLM Mooncake connector through 0.29.0 fails to properly manage GPU KV cache block ownership when concurrent child requests share a single transfer ID in prefill/decode disaggregated deployments. Attackers can trigger GPU memory exhaustion by submitting compl…

    vLLM vLLM
  • Medium 5.3
    CVE-2026-94625

    vLLM through 0.29.0 Resource Exhaustion via Ownerless Mooncake Transfer Placeholders

    vLLM through 0.29.0 contains a resource exhaustion vulnerability in MooncakeConnector where rejected prefill requests create ownerless transfer placeholders that are never reclaimed. Attackers can send rejected requests to exhaust sender task pools, causing v…

    vLLM vLLM vllm PyPI

Revision history

  1. #3

    Neue Updates von Red Hat aufgenommen

  2. #2

    Neue Updates von Red Hat aufgenommen

  3. #1

    Initiale Fassung

References