Skip to content
OpenAdvisories
High · 7.5 CVE-2024-8768 EUVD-2024-2882GHSA-w2r7-9579-27hfPYSEC-2026-2024

Vllm: a completions api request with an empty prompt will crash the vllm api server.

Published Sep 17, 2024 · Updated Nov 20, 2025 · Assigned by redhat

Description

A flaw was found in the vLLM library. A completions API request with an empty prompt will crash the vLLM API server, resulting in a denial of service.

Affected products

VendorProductAffectedFixed
— vllm < 0.5.5 0.5.5
Red Hat Red Hat Enterprise Linux AI (RHEL AI) — —

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI vllm < 0.5.5 0.5.5 GHSA-w2r7-9579-27hf

References