CVE-2026-116181

vLLM 0.20.1 before 0.29.0 DoS and GPU Out-of-Bounds Write via stop_token_ids

State: Published
Severity: 7.1 High
Published: Oct 25, 2026
Updated: Oct 29, 2026
Reserved: Oct 25, 2026

Description

vLLM from 0.20.1 before 0.29.0 contains an improper input validation vulnerability that allows remote attackers to crash the engine by supplying out-of-vocabulary stop_token_ids. Attackers can send OpenAI chat, completion, generate, or batch requests with invalid IDs to terminate the engine or write outside the V2 runner's logits buffer.

Scores

CVSS	Score	Vector	Source
4.0	7.1 High	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N	VulnCheck
3.1	6.5 Medium	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	VulnCheck

Weaknesses

CWE-129 Improper Validation of Array Index

Affected Products

Product	Versions
vllmvllm-project	0.20.1 to before 0.29.0Affected 0.29.0Not affected

References

GitHub Security Advisory (GHSA-w9r6-29q4-pvpr)vendor-advisory
VulnCheck Advisory: vLLM 0.20.1 before 0.29.0 DoS and GPU Out-of-Bounds Write via stop_token_idsthird-party-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.