CVE-2026-94626

Name of the Vulnerable Software and Affected Versions vLLM versions prior to 0.29.1

Description OpenAI-compatible completion endpoints fail to validate the tp size parameter within kv transfer params. In prefill/decode disaggregated deployments, an attacker can provide arbitrary values for tp size to allocate unbounded memory, which can exhaust system resources and trigger a kernel OOM-kill (Out-Of-Memory kill, a process where the operating system terminates a process to free up memory) of the decode worker process.

Recommendations Update vLLM to version 0.29.1 or later. Avoid using the tp size parameter in the kv transfer params of OpenAI-compatible completion endpoints until the update is applied.