Description
vLLM before 0.31.0 uses a client-supplied multimodal uuid verbatim as cache identity with no consistency check on cache hits, allowing engine crashes. Unauthenticated attackers can desynchronize the P0/P1 processor caches to trigger a fatal token-placeholder mismatch, killing the entire serving instance until restarted.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| vllm-project | vllm | < 0.31.0 | 0.31.0 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | vllm | < 0.31.0 | 0.31.0 | GHSA-p92p-rxj5-7p2x |
Advisories 1
- WID-SEC-2026-4076 vllm: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 12, 2026
References
- GitHub Security Advisory (GHSA-p92p-rxj5-7p2x) vendor-advisory
- VulnCheck Advisory: vLLM before 0.31.0 Remote Engine Crash via Forged Multimodal UUID third-party-advisory