Live › vulnerability › CVE-2026-116173
Go to dashboardvLLM from 0.22.0 before 0.24.0 has a denial of service flaw in its Rust gRPC frontend. A remote request with output logprobs enabled and more than 128 candidate token IDs makes the sampler throw a fatal exception and terminates EngineCore.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-25 14:41 UTC. All times on this page are UTC.
Teams running vLLM 0.22.x or 0.23.x with the Rust gRPC frontend reachable by clients they do not fully trust. Internal-only deployments with no untrusted callers are at lower risk. Teams on 0.24.0 or later, or on other vLLM versions outside the range, can skip it.
No product ranges from the sources yet.
pip show vllm and see whether it falls in 0.22.0 up to but not including 0.24.0.0.24.0 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
vLLM from 0.22.0 before 0.24.0 contains a denial of service vulnerability that allows remote attackers to terminate EngineCore by bypassing logprob_token_ids limits in the Rust gRPC frontend. Attackers can send Generate or GenerateStream requests with output_logprobs enabled and more than 128 output_candidates.token_ids, triggering a fatal sampler exception that crashes the engine.
This page as .md · .json · in your agent: get_signal("CVE-2026-116173")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.