Denial of Service Vulnerability in vLLM Product by vLLM Project
CVE-2026-93592

8.7HIGH

Key Information:

Vendor

Vllm-project

Status
Vllm
Vendor
CVE Published:
18 September 2026

What is CVE-2026-93592?

The vLLM product prior to version 0.28.0 contains a vulnerability that fails to properly validate the lower bound of token IDs in its /v1/embeddings and /pooling endpoints. This oversight allows unauthenticated users to submit negative token IDs, leading to a Denial of Service condition. A single request with such an ID triggers a CUDA device-side assertion that corrupts the GPU context, resulting in all subsequent requests being unsuccessful until the process is manually restarted. This vulnerability underscores the importance of validation checks to maintain service availability and integrity.

Affected Version(s)

vllm 0 < 0.28.0

vllm 0.28.0

References

https://github.com/vllm-project/vllm/security/advisories/...
vendor-advisory
https://www.vulncheck.com/advisories/vllm-before-0.28.0-d...
third-party-advisory

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

ECMGit
YixinZ2004
jperezdealgaba
.