CVE-2026-94623Disclosure(vllm / vllm)

LOWCVSS 8.7 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch vllm vllm systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

vLLM through 0.29.0 contains a denial of service vulnerability in the NIXL connector's prefix caching implementation that fails to properly validate block counts across multi-prompt completion requests in prefill/decode disaggregated deployments. Attackers can trigger an assertion failure in NixlBaseConnectorWorker._apply_prefix_caching by submitting completion requests with multiple prompts of varying lengths, causing the decode worker to terminate and become unavailable until restarted.

vllm CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Patch / fix

https://github.com/vllm-project/vllm/pull/51505

Vendor / third-party advisories

https://www.vulncheck.com/advisories/vllm-through-0.29.0-denial-of-service-via-nixl-multi-prompt-assertion-failure

Other references

Weakness type (CWE)

CWE-617

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

vllm

Threat summary

Patch or workaround signal is available
2 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 2 signals
Disclosure: 1 classified signal
Peaked 1d ago at 1 mentions (2026-09-22); latest day: 1
2 total mentions across 2 days

Affected systems

Vendors

vllm

Products

vllm

Deep dive

Activity timeline2 mentions / 2d

Signal classification2 categories

Disclosure

150.0%

Patch

150.0%

Referenced assets2 URLs

By indicator

Classification over time

Date	Total	Labels

2026-09-22	1	Disclosure1
2026-10-06	1	Patch1

Full discourse2 posts

Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters32d
Patch
CVE-2026-94623: vLLM through 0.29.0 DoS. Malformed multi-prompt requests crash decode workers via prefix caching assertion. CVSS 7.5. Patch still under review - isolate or upgrade now. https://www.valtersit.com/cve/CVE-2026-94623/ #CVE #infosec #vLLM #vLLM #CVEALERT #CVE #infosec #Linux #XSS #valtersit #snippet #SysAdmin #cybersecurity #devsecops #devops #developer #100daysofcode #git #github #gitlab #redteam #blueteam #ethicalhacker #cybersecurityawareness #cybersecuritynews #cybersecuritytips #python #hacker #kali #ubuntu #debian #docker
Post summary
The post discloses a vLLM denial-of-service vulnerability and provides technical impact details, a CVSS score, and immediate mitigation guidance. It includes no PoC, exploit tooling, or evidence of active exploitation.
0000040
1.0K followersView on X
ThreatAft@ThreatAft46d
Disclosure
🚨 vLLM DoS CLUSTER — 5 × CVSS 7.5 One crafted request crashes the shared inference worker. Every client loses service. • CVE-2026-94622 — NIXL metadata • CVE-2026-94623 — Prefix caching → https://threataft.com/articles/vllm-dos-cluster-five-memory-exhaustion-cves #vLLM #CVE #LLM #PatchNow #CyberSecurity #ThreatIntel
Post summary
The tweet announces five vLLM DoS CVEs (CVSS 7.5 each) with brief technical context and links to an article, but provides no PoC, exploit tool, active-exploitation evidence, or named patch/workaround.
0000062
43 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	vllm	vllm	-	-	-

Explore more

Back to dashboard vllm CVEs vllm vulnerabilities