vLLM 0.22.0 through 0.23.0 Denial of Service via stop_token_ids
Published Sep 26, 2026
8.2
HIGHCVSS 4.0
EPSS 0.36%
Description
vLLM versions 0.22.0 through 0.23.0 fail to validate stop_token_ids against vocabulary bounds in Rust HTTP and gRPC frontends, allowing out-of-vocabulary token IDs to reach MinTokensLogitsProcessor. Attackers can submit requests with min_tokens greater than zero and out-of-vocabulary stop_token_ids to trigger CUDA tensor indexing failures that leave EngineCore in a fatal state requiring service restart.
Affected products
-
Affected
- ≥ 0.22.0, < 0.24.0
Unaffected
- 0.24.0
Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).
| Vendor | Product | Default status | Versions |
|---|---|---|---|
| Vllm-Project | Vllm | unaffected | Affected
Unaffected
|
No data.
Red Hat AI Inference Server
rhaii/vllm-cpu-rhel9
Affected
Red Hat AI Inference Server
rhaii/vllm-cuda-rhel9
Affected
Red Hat AI Inference Server
rhaii/vllm-gaudi-rhel9
Affected
Red Hat AI Inference Server
rhaii/vllm-neuron-rhel9
Affected
Red Hat AI Inference Server
rhaii/vllm-rocm-rhel9
Affected
Red Hat AI Inference Server
rhaii/vllm-spyre-rhel9
Affected
Red Hat AI Inference Server
rhaii/vllm-tpu-rhel9
Affected
Red Hat AI Inference Server
rhaiis/vllm-cpu-rhel9
Affected
Red Hat AI Inference Server
rhaiis/vllm-cuda-rhel9
Affected
Red Hat AI Inference Server
rhaiis/vllm-neuron-rhel9
Affected
Red Hat AI Inference Server
rhaiis/vllm-rocm-rhel9
Affected
Red Hat AI Inference Server
rhaiis/vllm-spyre-rhel9
Affected
Red Hat AI Inference Server
rhaiis/vllm-tpu-rhel9
Affected
Red Hat Enterprise Linux AI (RHEL AI) 3
rhelai3/bootc-aws-cuda-rhel9
Affected
Red Hat Enterprise Linux AI (RHEL AI) 3
rhelai3/bootc-azure-cuda-rhel9
Affected
Red Hat Enterprise Linux AI (RHEL AI) 3
rhelai3/bootc-azure-rocm-rhel9
Affected
Red Hat Enterprise Linux AI (RHEL AI) 3
rhelai3/bootc-cuda-rhel9
Affected
Red Hat Enterprise Linux AI (RHEL AI) 3
rhelai3/bootc-gaudi-rhel9
Affected
Red Hat Enterprise Linux AI (RHEL AI) 3
rhelai3/bootc-gcp-cuda-rhel9
Affected
Red Hat Enterprise Linux AI (RHEL AI) 3
rhelai3/bootc-rocm-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-kserve-agent-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-kserve-controller-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-kserve-router-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-kserve-storage-initializer-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-llm-d-kv-cache-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-th-torch-cuda-py312-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-vllm-gaudi-rhel9
Affected
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat AI Inference Server | rhaii/vllm-cpu-rhel9 | Affected | n/a |
| Red Hat AI Inference Server | rhaii/vllm-cuda-rhel9 | Affected | n/a |
| Red Hat AI Inference Server | rhaii/vllm-gaudi-rhel9 | Affected | n/a |
| Red Hat AI Inference Server | rhaii/vllm-neuron-rhel9 | Affected | n/a |
| Red Hat AI Inference Server | rhaii/vllm-rocm-rhel9 | Affected | n/a |
| Red Hat AI Inference Server | rhaii/vllm-spyre-rhel9 | Affected | n/a |
| Red Hat AI Inference Server | rhaii/vllm-tpu-rhel9 | Affected | n/a |
| Red Hat AI Inference Server | rhaiis/vllm-cpu-rhel9 | Affected | n/a |
| Red Hat AI Inference Server | rhaiis/vllm-cuda-rhel9 | Affected | n/a |
| Red Hat AI Inference Server | rhaiis/vllm-neuron-rhel9 | Affected | n/a |
| Red Hat AI Inference Server | rhaiis/vllm-rocm-rhel9 | Affected | n/a |
| Red Hat AI Inference Server | rhaiis/vllm-spyre-rhel9 | Affected | n/a |
| Red Hat AI Inference Server | rhaiis/vllm-tpu-rhel9 | Affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) 3 | rhelai3/bootc-aws-cuda-rhel9 | Affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) 3 | rhelai3/bootc-azure-cuda-rhel9 | Affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) 3 | rhelai3/bootc-azure-rocm-rhel9 | Affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) 3 | rhelai3/bootc-cuda-rhel9 | Affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) 3 | rhelai3/bootc-gaudi-rhel9 | Affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) 3 | rhelai3/bootc-gcp-cuda-rhel9 | Affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) 3 | rhelai3/bootc-rocm-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-kserve-agent-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-kserve-controller-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-kserve-router-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-kserve-storage-initializer-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-llm-d-kv-cache-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-th-torch-cuda-py312-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-vllm-gaudi-rhel9 | Affected | n/a |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (7)
- https://access.redhat.com/security/cve/CVE-2026-100652 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2541838 Issue Tracking
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87746 Advisory
- https://github.com/vllm-project/vllm/security/advisories/GHSA-qff2-492f-9fm4 vendor-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-100652
- https://www.cve.org/CVERecord?id=CVE-2026-100652
- https://www.vulncheck.com/advisories/vllm-0.22.0-through-0.23.0-denial-of-service-via-stop-token-ids third-party-advisory
Change history (0)
No recorded changes yet.
CVE.org / MITRE
CISA Vulnrichment
GitHub
No data