Threats tagged 'pysec-2026-4350'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.2	EPSS 0.3%	CVE-2026-116173vLLM from 0.22.0 before 0.24.0 contains a denial of service vulnerability that allows remote attackers to terminate High8.2EPSS 0.3%2026-10-25GCVE DatabaseCVE-2026-116173 vLLM versions from 0.22.0 up to but not including 0.24.0 contain a denial of service vulnerability. Remote attackers can exploit this flaw by sending specially crafted Generate or GenerateStream requests with output_logprobs enabled and more than 128 output_candidates.token_ids. This triggers a fatal sampler exception in the Rust gRPC frontend, causing the EngineCore to crash and resulting in denial of service. The issue is fixed in version 0.24.0. EPSS 0.3%Report on CVE-2026-116173 Vulnerability #pysec-2026-4350 #pypi	GCVE Database	2026-10-25

Page 1 of 1