Bug 2541838 (CVE-2026-100652) - CVE-2026-100652 vllm: vLLM: Denial of Service via out-of-bounds stop token IDs
Summary: CVE-2026-100652 vllm: vLLM: Denial of Service via out-of-bounds stop token IDs
Keywords:
Status: NEW
Alias: CVE-2026-100652
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
high
high
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-09-26 13:34 UTC by OSIDB Bzimport
Modified: 2026-09-26 13:49 UTC (History)
4 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2026-09-26 13:34:17 UTC 
vLLM versions 0.22.0 through 0.23.0 fail to validate stop_token_ids against vocabulary bounds in Rust HTTP and gRPC frontends, allowing out-of-vocabulary token IDs to reach MinTokensLogitsProcessor. Attackers can submit requests with min_tokens greater than zero and out-of-vocabulary stop_token_ids to trigger CUDA tensor indexing failures that leave EngineCore in a fatal state requiring service restart.
Note You need to log in before you can comment on or make changes to this bug.