CVE-2026-115914: vLLM denial of service through crafted DeepSeek-OCR image input

Summary

vLLM versions 0.11.1 through 0.32.0 are affected in the image path for DeepSeek-OCR, DeepSeek-OCR-2 and Unlimited-OCR. A remote client that can reach the OpenAI-compatible API can submit a legal image whose normalized pixels sum to zero while it is alone in its per-step encoder batch. This makes _parse_and_validate_image_input return no embedding, which triggers a fatal assertion in sanity_check_mm_encoder_outputs that shuts down the engine for all users.

Mitigation

Fixed in version 0.32.0.

Topics

• Inference infrastructure

Related items

• MediumCVE-2026-115922: Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to 1.22.0…Similar attack · NVD/CVE Database
• MediumCVE-2026-115921: ONNX shape inference crash from malicious model scan attributesSimilar attack · NVD/CVE Database
• MediumCVE-2026-115920: ONNX ConvTranspose shape inference crash from malformed weight tensorSimilar attack · NVD/CVE Database
• MediumCVE-2026-115919: ONNX shape inference out-of-bounds read via malformed RNN, LSTM and GRU nodesSimilar attack · NVD/CVE Database
• MediumCVE-2026-115918: vLLM Jinja chat template injection through /v1/responses endpointSimilar attack · NVD/CVE Database