{"data":{"id":"a45197ed-95a7-4ae0-9435-1112b6e4ba95","title":"GHSA-hpv8-x276-m59f: vLLM Vulnerable to Remote DoS via Special-Token Placeholders","summary":"Unauthenticated text-only prompts in vLLM that spell special tokens such as <|image_pad|> are interpreted as control tokens. When image or video placeholders arrive without matching data, get_input_positions_tensor in vllm/model_executor/layers/rotary_embedding.py indexes empty image_grid_thw/video_grid_thw grids without a bounds check, raising an unhandled IndexError that can terminate the worker. Reproduced on vLLM 0.10.0 with Qwen2.5-VL; a single request can trigger it.","solution":"Fixes: Changes associated with https://github.com/vllm-project/vllm/issues/32656","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-hpv8-x276-m59f","publishedAt":"2026-05-05T22:21:41.000Z","cveId":"CVE-2026-44222","cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["denial_of_service"],"issueType":"vulnerability","affectedPackages":["vllm@>= 0.6.1, < 0.20.0 (fixed: 0.20.0)"],"affectedPackageNames":["vllm"],"affectedPackageRefs":["pypi:vllm"],"affectedVendors":[],"affectedVendorsRaw":["vLLM","Qwen2.5-VL"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00414,"epssCheckedAt":"2026-11-08T06:09:28.489Z","kevDateAdded":null,"advisoryAliases":["GHSA-hpv8-x276-m59f"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-05-05T22:21:41.000Z","fixReleasedAt":"2026-04-27T11:07:22.058Z","daysToFix":-8,"fixCheckedAt":"2026-10-29T21:36:55.980Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["availability"],"aiComponentTargeted":"inference","llmSpecific":false,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"vllm","fixedVersion":"0.20.0","matchedVersion":"0.20.0","fixReleasedAt":"2026-04-27T11:07:22.058Z","daysToFix":-8,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:36:55.832Z"}]}}