{"data":{"id":"41404ae5-a355-4ea2-adb9-f7ef5af461c4","title":"CVE-2026-55574: vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Prior to 0.24.0, the…","summary":"CVE-2026-55574 affects vLLM, an inference and serving engine for LLMs, prior to 0.24.0. The structured_outputs.regex API parameter passes a user-supplied regular expression directly to the xgrammar and outlines grammar compiler backends without a compilation timeout, and the outlines validation performs no complexity analysis. A single request with an adversarial regex containing nested quantifiers can cause exponential state-space expansion, hanging an inference worker indefinitely and denying service.","solution":"Fixed in version 0.24.0.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-55574","publishedAt":"2026-07-06T21:16:57.347Z","cveId":"CVE-2026-55574","cweIds":["CWE-1333"],"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["denial_of_service"],"issueType":"vulnerability","affectedPackages":["vllm@< 0.24.0 (fixed: 0.24.0)"],"affectedPackageNames":["vllm"],"affectedPackageRefs":["pypi:vllm"],"affectedVendors":[],"affectedVendorsRaw":["vLLM"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"vLLM denial of service through structured_outputs regex parameter","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00583,"epssCheckedAt":"2026-10-14T06:09:06.335Z","kevDateAdded":null,"advisoryAliases":["GHSA-rwxx-mrjm-wc2m"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:47:00.026Z","patchAvailable":true,"disclosureDate":"2026-07-06T21:16:57.347Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["availability"],"aiComponentTargeted":"inference","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null}}