Vulnerability · Published Oct 25, 2026 · Assigned by VulnCheck
CVE-2026-116172vLLM 0.22.0 before 0.24.0 DoS via Rust gRPC CandidateTokens.top_n
Medium 5.9
In plain English
A medium-severity improper input validation in vllm from vllm-project. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 27% of all known vulnerabilities).
Severity (CVSS 3.1)5.9Medium
Exploit odds (30 days)0.3%top 72.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
vLLM from 0.22.0 before 0.24.0 contains an improper input validation vulnerability in the Rust gRPC converter that allows remote attackers to bypass max_logprobs limits via CandidateTokens.top_n. Attackers can send Generate or GenerateStream requests with oversized or integer-wrapping top_n values to trigger torch.topk failures that terminate EngineCore.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| vllm-project | vllm | 0.22.0 – before 0.24.0 |
Weakness: CWE-20 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
References
- GitHub Security Advisory (GHSA-rwfw-xvg3-3937) vendor-advisory
- VulnCheck Advisory: vLLM 0.22.0 before 0.24.0 DoS via Rust gRPC CandidateTokens.top_n third-party-advisory