CVE-2026-105757 PUBLISHED

vLLM: Structured-output request errors escape the request boundary and terminate the shared EngineCore — engine-fatal denial of service (3 sites)

Assigner: GitHub_M
Reserved: 05.10.2026 Published: 05.10.2026 Updated: 06.10.2026

vLLM is an inference and serving engine for large language models. Prior to 0.30.0, structured-output request failures can escape request-scoped validation and reach the EngineCore fatal-error path. A per-request backend mismatch can re-raise a grammar compilation exception, padding produced by the ngram_gpu speculative-decoding mode can pass a negative token to guidance validation, and the Rust frontend can admit empty structured-output values that the Python frontend rejects, allowing ordinary constrained-generation requests to terminate the shared engine. This issue is fixed in version 0.30.0.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS Score: 6.5

Product Status

Vendor vllm-project
Product vllm
Versions
  • Version < 0.30.0 is affected

References

Problem Types

  • CWE-20: Improper Input Validation CWE
  • CWE-248: Uncaught Exception CWE
  • CWE-755: Improper Handling of Exceptional Conditions CWE