CVE-2026-73558: vLLM is an inference and serving engine for large language models. Prior to 0.27.0, an integer overflow in blockIdx.x *
Summary
vLLM is an inference and serving engine for large language models that had an integer overflow bug (a math error where a number gets too large for its storage space) in versions before 0.27.0. This bug could cause one user's AI inference result (the AI's output) to leak to another user processing a request in the same batch, exposing private data.
Solution / Mitigation
This issue is fixed in version 0.27.0.
Vulnerability Details
5.3(medium)
EPSS: 0.0%
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
network
high
none
required
August 13, 2026
Classification
Taxonomy References
Affected Vendors
Related Issues
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-73558
First tracked: August 13, 2026 at 02:08 PM
Classified by LLM (prompt v3) · confidence: 95%