Live › vulnerability › CVE-2026-116174
Go to dashboardvLLM's Rust gRPC Generate and GenerateStream services forward prompt token IDs to EngineCore without checking them. A request with out-of-vocabulary prompt.token_ids triggers a fatal embedding lookup failure that terminates EngineCore and leaves the server unhealthy.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-25 14:41 UTC. All times on this page are UTC.
Teams running vLLM 0.22.0 through 0.23.x with the Rust gRPC Generate or GenerateStream service exposed to clients. Deployments that only serve local or trusted callers over HTTP without the gRPC endpoint are less exposed; the sources do not say which configurations enable the gRPC service by default.
No product ranges from the sources yet.
pip show vllm and look for a version from 0.22.0 up to, but not including, 0.24.0.0.24.0 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
vLLM from 0.22.0 before 0.24.0 contains an improper input validation vulnerability in the Rust gRPC Generate and GenerateStream service that forwards unchecked prompt token IDs to EngineCore. Attackers can submit requests with out-of-vocabulary prompt.token_ids values to trigger a fatal embedding lookup failure that terminates EngineCore and leaves the server unhealthy.
This page as .md · .json · in your agent: get_signal("CVE-2026-116174")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.