PT-2026-70332
CVE-2026-27765
·
Published
2026-08-11
·
Updated
2026-09-24
Description by
CVSS 4.0
6.8
MediumMetricsAV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
vLLM Hardware Plugin for Intel(R) Gaudi(R) versions prior to 0.16.0
Description
Improper input validation within Ring 3: User Applications may allow an authenticated adversary to cause a denial of service. This issue can be triggered via local access through a low complexity attack that requires no user interaction or special internal knowledge.
Recommendations
Update vLLM Hardware Plugin for Intel(R) Gaudi(R) to version 0.16.0 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾