CVE-2026-94623

Name of the Vulnerable Software and Affected Versions vLLM versions prior to 0.29.1

Description A denial of service issue exists in the NIXL connector's prefix caching implementation within prefill/decode disaggregated deployments. The system fails to properly validate block counts when processing multi-prompt completion requests. An attacker can cause the decode worker to terminate and remain unavailable until a restart occurs by submitting completion requests containing multiple prompts of varying lengths, which triggers an assertion failure in the NixlBaseConnectorWorker. apply prefix caching() function.

Recommendations Update vLLM to version 0.29.1 or later.