CVE-2026-114050: vLLM denial of service via client-supplied multimodal uuid cache desync

Summary

vLLM before 0.31.0 uses a client-supplied multimodal uuid verbatim as cache identity, with no consistency check on cache hits. Unauthenticated attackers can desynchronize the P0/P1 processor caches to trigger a fatal token-placeholder mismatch, crashing the entire serving instance until it is restarted.

Mitigation

The source does not state a fix yet. Check the original advisory for updates.

Topics

• Inference infrastructure

Related items

• HighCVE-2026-114055: vLLM uncontrolled resource consumption via per-request mm_processor_kwargsSimilar attack · NVD/CVE Database
• HighCVE-2026-114052: vLLM memory exhaustion in MOSS-Audio model serving via /tokenize endpointSimilar attack · NVD/CVE Database
• HighCVE-2026-114051: vLLM validation bypass in /inference/v1/generate requests with null max_tokensSimilar attack · NVD/CVE Database
• HighGHSA-46jr-4wx8-v453: MCP TypeScript SDK: One HTTP request within the default size limit could exhaust server memory during validationSimilar attack · GitHub Advisory Database
• LowLLM Trojans that Increase Response Lengths and CostSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)