CVE-2026-94623: vLLM denial of service through NIXL connector prefix caching

Summary

CVE-2026-94623 affects vLLM through 0.29.0, specifically the NIXL connector's prefix caching implementation in prefill/decode disaggregated deployments. Completion requests containing multiple prompts of varying lengths trigger an assertion failure in NixlBaseConnectorWorker._apply_prefix_caching, because block counts are not properly validated. The resulting crash makes the decode worker unavailable until it is restarted.

Mitigation

The source does not state a fix yet. Check the original advisory for updates.

Topics

• Inference infrastructure

Related items

• MediumGHSA-h7c4-q426-7jh9: tsParticles: A single anonymous MCP session can monopolize HTTP mode and deny new clientsSimilar attack · GitHub Advisory Database
• HighGHSA-4p8p-pjpq-2w7h: tsParticles: Malformed JSON requests can terminate the @tsparticles/mcp-server HTTP processSimilar attack · GitHub Advisory Database
• HighGHSA-447x-qqwf-m7xq: tsParticles: Unbounded HTTP Request Body Buffering in @tsparticles/mcp-server Leads to Remote DoSSimilar attack · GitHub Advisory Database
• HighCVE-2026-123356: GROBID unauthenticated thread exhaustion through /api/modelTraining endpointSimilar attack · NVD/CVE Database
• MediumCVE-2026-83494: training-operator immutability check bypass in PyTorchJob ValidateUpdate webhookSimilar attack · NVD/CVE Database