CVE-2026-116181
Summary
by MITRE • 10/25/2026
vLLM from 0.20.1 before 0.29.0 contains an improper input validation vulnerability that allows remote attackers to crash the engine by supplying out-of-vocabulary stop_token_ids. Attackers can send OpenAI chat, completion, generate, or batch requests with invalid IDs to terminate the engine or write outside the V2 runner's logits buffer.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Analysis
by VulDB Data Team • 10/25/2026
Xxx Xxxx Xxxxxxx, X Xxxx-xxxxxxxxxx Xxx Xxxxxx-xxxxxxxxx Xxxxxxxxx Xxxxxx Xxx Xxxxx Xxxxxxxx Xxxxxx, Xxxxxxxx X Xxxxxxxx Xxxxxxxx Xxxxx Xxxxxxxxxx Xxxxxxxxxxxxx Xxxxxxxxx Xxxxxxxx Xxxx X.xx.x Xx Xx Xxx Xxx Xxxxxxxxx X.xx.x. Xxxx Xxxx Xxxxx Xxxx Xxxxxxxxxxxx Xxxxxxxx Xxxxxxxx Xxxx Xxxxxxxxxx Xxxx Xxxxx Xxxxxxxxxxx Xxxxxxxx Xx Xxxxxx Xxxxxxxxx Xxxxxxx Xxxxxxxx Xxx Xxxxxxxxx Xxxx Xx Xxxxxx-xxxxxxxxxx Xxxx, Xxxxxxxxxx, Xxxxxxxx, Xx Xxxxx Xxxxxxx Xxxxxxxxxx. Xxx Xxxx Xxxxxxxxx Xxxxx Xxxx Xx Xxx Xxxxxxxx Xx Xxx-xx-xxxxxxxxxx Xxxx_xxxxx_xxx Xxxxxx Xxx Xx Xxxxxx Xxxxxxxxxxxx. Xxxx X Xxxx Xxxxxxxx Xx Xxxxxxxxxx Xxxx Xxxx Xxx Xxxxxxxxxx Xx Xxx Xxxxx Xxxxx Xx Xxx Xxxxx'x Xxxxxxxxxx, Xxx Xxxxxx Xxxxx Xx Xxxxxxxx Xxxx Xxxxx Xxxxxxx Xxxxxxxx Xxxxxx Xxxxxx Xxxxxxxxxx Xxxx Xxxxxxxxx Xxxxx. Xxxx Xxxx Xx Xxxxxxxxxx Xxxxxx Xxxxxxxxx Xxxxxx Xx Xxxxxxx Xxxxxxxxx Xxxxxxxx Xxxxxx Xxx Xxxxxxxxx Xxxxxxx, Xxxxxxxxxxxx Xxxxxxxxx Xxx Xxxxxxxx Xxxxxxxxxx Xxxxxxxxxxx Xxx Xxxxxxxx Xxxxxx Xxx Xxxxxxxxxxx Xxxxxxxxxx.
Xxxx X Xxxxxxxxx Xxxxxxxxxxx, Xxx Xxxxxxxxxxxxx Xxxxxxxx Xxx Xxxxxxxxxx Xxxx Xxxx_xxxxx_xxx Xxxx Xxxxxx Xx Xxxxx Xxxxxxx Xxxxxx Xxx Xxxxx'x Xxxxxxxxx Xxxxx. Xx Xxxxxx Xxxxxxxxx, Xxxxx Xxxxxxxxxxx Xxx Xxxx Xx Xxxxxxxxx Xxxx Xxxxxxxxxx Xxxxxx Xxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxx Xxxxxxxx. Xxxxxxx, Xxxxxxx Xxxx Xxxx Xxx Xxxxxxxxxx Xxxxx Xxxxxxx Xxx Xxxxxxxx Xxx Xxxx Xxxxxx Xxx Xxxxxxxxxx Xxxxx Xx Xxxxx Xxxxxxx, Xx Xxxxxxxx Xxxx Xxxxxxxxxx Xxxxx Xxxxxxx Xxxxxx Xxxxxxxxxx Xx Xxxxxxx Xxxxxx. Xxxx Xxx Xxxx Xx Xxx Xxxxxxxx Xxxxxxx Xxxxxxxx Xxxxxxxxx Xx Xxx Xxxxxxxx Xxxxxxxxx Xxxx Xxx Xxxxxxxx Xxxxx Xx Xxx Xxxx Xx Xxxxxxx Xxxxxxxxxx. Xxx Xxxxx Xxxxxxx Xx X Xxxxxx Xx Xxxxxxx Xxxxx Xxx Xxxxxx Xxxxxxx Xxxxxxxx Xxx Xx Xx Xxxxxxxxx Xxxxxxxxx Xx Xxxxxxxxxxxx Xxxxx Xxxxxxxxx Xx Xxx Xxxxxxxxx Xxxxx. Xxx Xxxxxx, Xxxx Xxxxxx Xxxxxxx Xxxxxxxx Xxxxxx Xxxxxxxxxx, Xxxxxxxxxxxx Xxxxxxx Xxxxxxx Xxx Xxxxxx Xx Xxx Xx Xxxxxx'x Xxxxxx Xxxxxx. Xxxx Xxx-xx-xxxxxx Xxxxx Xxx Xxxxxxx Xxxxxxxx Xxxxxx Xxxxxxxxxx, Xxxxxxxxxxx Xxxxxxx Xx Xxxxxxxxx Xxxx Xxxxxxxxx Xx Xxxxxxxxx Xx Xxxxxxxxxxx Xxxx Xxxxx Xxxxxxxxxxxxxxx, Xxxxxxxx Xxx Xxxxxxx Xxxxxxxxx Xxxxxx Xx Xxxxxx Xxxxxxxxxxx Xxx Xxxxxxx Xxxxxxxxxxxx.
Xxx Xxxxxxxxxxx Xxxxxx Xx Xxxx Xxxxxxxxxxxxx Xx Xxxxxxxxxxx Xxx Xxx Xxxxxxxxxxxx Xxxxxxxxx Xxxx Xx X Xxxxxxx Xxxxx Xxx Xxxxx Xxxxxxxx Xxxxxx. Xxxxx Xxxxx Xxxx Xxx Xxxxx Xxxxxxx Xxxx Xxxxxxxx Xx Xxxxx Xxxxxxxx Xxxxxxxxxxxx Xx Xxxxx Xx Xxxxxxxx Xxxx Xx Xxxxxxxx, Xxxxxx Xxxxxxxxx Xxx Xxxxxxx Xxxx Xxxx Xxxxxxx Xxxxxxxxxxxxxx Xx Xxxx Xxxxxxx Xxxxxxxxxxxxxx. X Xxxxxxxxxx Xxxxxxxxxxxx Xxxxxxx Xx Xxx Xxxxxxxxxxx Xx Xxx Xxxxxxxxx Xxxxxx Xxxxxxx, Xxxxxxx Xxxxxxxxx Xxxxxxx Xxxxxxxxxx Xxx Xxx Xxxxxxxxx Xxxxxxx. Xx Xxxxxxxxxxxx Xxxxx Xxxx Xxxxxxxxxxxx Xx Xxxxxxxx, Xxxx Xx Xxxxxxxxxx-xxxxx Xx Xxxxxxxxx, Xxxxxxxx Xxxxxxx Xxxxxxx Xx Xxxxxxxxx Xxxxxxxx Xxx Xxxx Xx Xxxxxxxxxxx Xxxxxxxx Xxx Xxxxxxxx Xxxxxxxxxx Xx Xxx Xxxxxx Xxxxxxxx Xx Xxxxxxx Xx Xxxxxxx Xxxx Xxxxxxxx. Xxxxxxxxxxx, Xx Xxx Xxx-xx-xxxxxx Xxxxx Xxxxxxxxx Xx Xxxxxxxxx Xx X Xxxxxx Xxxx Xxxxxx Xxxxxxx Xxxx Xxxxxx Xxxxxxxx, Xx Xxxxx X Xxxx Xx Xxxxxxxxx Xxxxxxxxxx Xx Xxxxxx Xxxx Xxxxxxxxx, Xxxxxxxxxxxx Xxx Xxxxxxxxx Xxx Xxxxxxxxxxxxxxx Xx Xxx Xxxxxxxxxx Xxxx Xxxxxx Xxx Xxx Xxxx Xxxxxxxxx Xx Xxx Xxxxx.
Xx Xxxxxxxx Xxxx Xxxxxxxxxxxxx, Xxxxxxxxxxxxx Xxxx Xxxxxxx Xxxxx Xxxx Xxxxxxxxxxxxx Xx Xxxxxxx X.xx.x Xx Xxxxx, Xxxxx Xxxxxx Xxxxx Xxxxxxxxxx Xxx Xxxx Xxxxxxxxxxx Xx Xxxxxx Xxxx Xxxx_xxxxx_xxx Xxx Xxxxxxx Xxxxxxx Xxxxx Xxxxxxxxxx Xxxxxxx Xxxxxx Xxxxx Xxxx Xx Xxxxxxxxx Xxxxx. Xxxxx Xx Xxxxxxx Xx Xxxxxxxx, Xxxxxxxxxxxxxx Xxxxxx Xxxxxxxxx Xxxxxx Xxxxxxx-xxxxx Xxxxxxxx Xxxx Xx Xxx Xxxxxxxxxxx Xxxxxxxxx Xx Xxx Xxxxxxxx Xxxx Xxxxxxxx Xxxxxxx Xxxxxxxx Xxx Xxxxxx Xxxxxx Xxxxxxxxxx Xxx-xxxxxxxx Xxxxx Xxxxxxxxxxx. Xxxxxxxxxxxx, Xxxxxxx Xxx Xxxx Xxxxxx Xxxx Xxxxxxxxxx Xxxxxx Xxxxxxxxxx Xxx Xxxxx Xxx Xxxxxxxxx Xxxxxx Xx Xxx Xxxxxxxxxx Xxxxxxxxxxxx Xxxxxxx Xx Xxxxxxxx Xxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxx. Xxxxxxxxxx Xxxx Xxx Xxxxxxx Xxxxxxxx Xx Xxxx_xxxxx_xx Xxxxxxxxxx Xxx Xxxxxxx Xx Xxxxxxxxx Xxxxxx Xxx Xxxxxxx Xxxxxxx Xxx Xxxx Xxx Xx Xxxxx Xxxxxxxxx Xxx Xxxxxxxx Xx Xxxxxxxxx Xxxxxxxx. Xxxx Xxxxx Xx Xxxxxxxxxxx Xxxxx Xxx-xx Xxxxxxxx Xxxxx Xxxxxxxxxx, Xxxxxxxxxxxx Xxx Xxxxxxxxx Xx Xxxxxxxx Xxxxxxxxxxxx Xx Xxx Xxxx-xxxxxxxx Xxxx Xxxxxx Xxxxxxxxxx Xxxxxx Xxxxxxxx-xxxxxxxx Xxxxxxxxxxxx.