{"data":{"id":"e67ec447-152b-4b0b-ad0a-1f48b21bac6e","title":"CVE-2026-116173: vLLM from 0.22.0 before 0.24.0 contains a denial of service vulnerability that allows remote attackers to terminate…","summary":"vLLM from 0.22.0 before 0.24.0 has a denial of service flaw in its Rust gRPC frontend, tracked as CVE-2026-116173. Remote attackers can bypass logprob_token_ids limits by sending Generate or GenerateStream requests with output_logprobs enabled and more than 128 output_candidates.token_ids, which triggers a fatal sampler exception that terminates EngineCore.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-116173","publishedAt":"2026-10-25T14:16:56.720Z","cveId":"CVE-2026-116173","cweIds":["CWE-20"],"cvssScore":"5.9","cvssSeverity":"medium","severity":"medium","attackType":["denial_of_service"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["vLLM"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"vLLM denial of service through oversized logprob token lists in gRPC frontend","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"network","attackComplexity":"high","privilegesRequired":"none","userInteraction":"none","exploitMaturity":"unknown","epssScore":0,"epssCheckedAt":"2026-10-25T18:08:32.806Z","kevDateAdded":null,"advisoryAliases":["GHSA-7r5r-rrjg-pf3c"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-25T18:08:39.459Z","patchAvailable":null,"disclosureDate":"2026-10-25T14:16:56.720Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["availability"],"aiComponentTargeted":"inference","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null}}