| 제목 | vLLM Project vLLM v0.26.0 Denial of Service |
|---|
| 설명 | vLLM's Rust-based Gemma4UnifiedParser contains an uncontrolled recursion vulnerability when parsing nested tool-call arguments. The parser implements Gemma4's object and array grammar using mutually recursive parsing functions without enforcing a maximum nesting depth.
A sufficiently deeply nested tool-call argument can exhaust the stack of the worker thread performing the parse. In Rust, stack overflow results in a fatal runtime error and process abort rather than a recoverable parser error or ordinary panic. Consequently, triggering the vulnerable parser can terminate the vLLM serving process and cause denial of service.
The parser processes model-generated tool-call output. An attacker who can submit prompts to a vLLM deployment can attempt to cause the model to emit the nested structure required to exercise the vulnerable parser.
Once sufficient nesting reaches the parser, stack exhaustion causes a fatal Rust runtime abort. This is not limited to returning a parser error for the malicious request: the process executing the parser terminates.
Therefore, an attacker capable of influencing generated tool-call output may be able to terminate an affected vLLM serving process and disrupt availability for other users of that process.
The exploit requires:
A vLLM deployment using the affected Gemma4 unified parser.
The attacker being able to submit inference requests.
The attacker successfully steering model output toward a sufficiently deeply nested Gemma4 tool-call argument.
Fix
The issue was fixed by vLLM PR #54303:
https://github.com/vllm-project/vllm/pull/54303 |
|---|
| 원천 | ⚠️ https://github.com/vllm-project/vllm/issues/50927 |
|---|
| 사용자 | Zyz3366 (UID 97230) |
|---|
| 제출 | 2026. 09. 02. AM 12:19 (29 날 ago) |
|---|
| 모더레이션 | 2026. 09. 30. PM 12:37 (29 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 411965 [vllm-project vLLM 까지 0.26.0 Gemma4UnifiedParser gemma4.rs 서비스 거부] |
|---|
| 포인트들 | 20 |
|---|