CVE-2026-116178

Name of the Vulnerable Software and Affected Versions vLLM versions 0.20.0 through 0.29.9

Description A denial of service issue allows remote attackers to crash the engine by sending inconsistent multimodal metadata to the disaggregated '/inference/v1/generate' endpoint. This occurs when a valid multimodal item is replayed with repeated or overlapping mm placeholders ranges, or when kwargs data and mm hashes lists are mismatched. These actions result in a negative text span during Qwen2.5-VL position construction, which terminates the engine.

Recommendations Update vLLM to version 0.30.0 or later. As a temporary mitigation, restrict access to the '/inference/v1/generate' endpoint to trusted users only.