AI agent vulnerability · vLLM

GHSA-hfwf-hgvp-4rr8: Duplicate Advisory: vLLM vulnerable to remote denial of service through forged multimodal UUID cache desynchronization

highCVSS 4.0 7.1 · 3.1 7.5

This advisory was withdrawn on Oct 23, 2026. The publisher no longer considers it a valid vulnerability.

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-p92p-rxj5-7p2x. This link is maintained to preserve external references. Original Description vLLM before 0.31.0 uses a client-supplied multimodal uuid verbatim as cache identity with no consistency check on cache hits, allowing engine crashes.

Published Oct 21, 2026 · Updated Oct 23, 2026

Affected packages

vllm

Ecosystem: PyPI
Affected: < 0.31.0
Fixed in: No patched version yet
Check: pip show vllm

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-p92p-rxj5-7p2x. This link is maintained to preserve external references.

Original Description

vLLM before 0.31.0 uses a client-supplied multimodal uuid verbatim as cache identity with no consistency check on cache hits, allowing engine crashes. Unauthenticated attackers can desynchronize the P0/P1 processor caches to trigger a fatal token-placeholder mismatch, killing the entire serving instance until restarted.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More vLLM vulnerabilities

All vLLM entries