CVE-2026-100652: vllm from 0.22.0 (inclusive), before 0.24.0 (exclusive), 0.22.0 to before 0.24.0

Affected technology

vllm · from 0.22.0 (inclusive), before 0.24.0 (exclusive)
vllm

vllm · 0.22.0 to before 0.24.0
vllm-project

Description’s affected range: versions 0.22.0 through 0.23.0 fail to validate stop_token_ids against vocabulary bounds in Rust HTTP and gRPC frontends

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Attackers can submit requests with min_tokens greater than zero and out-of-vocabulary stop_token_ids to trigger CUDA tensor indexing failures that leave EngineCore in a fatal state requiring service restart. Vendor/CNA’s CVSS 4.0 assessment (base score 8.2/10) rates confidentiality and integrity impact as none; availability impact as high.