CVE-2026-100652

Name of the Vulnerable Software and Affected Versions vLLM versions 0.22.0 through 0.23.0

Description The Rust HTTP and gRPC frontends fail to validate stop token ids against vocabulary bounds, allowing out-of-vocabulary token IDs to reach the MinTokensLogitsProcessor function. An attacker can submit requests where min tokens is greater than zero and stop token ids are out-of-vocabulary, triggering CUDA tensor indexing failures. This results in the EngineCore entering a fatal state, which necessitates a service restart.

Recommendations Update vLLM versions 0.22.0 through 0.23.0 to a newer version that implements proper validation for stop token ids.