PT-2026-30199 · Vllm · Vllm

Ez-Lbz · Published 2026-04-03 · Updated 2026-04-06 · CVE-2026-34756

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions vLLM versions 0.1.0 through 0.18.9

Description A Denial of Service vulnerability exists in the vLLM OpenAI-compatible API server. Due to the lack of an upper bound validation on the n parameter in the ChatCompletionRequest and CompletionRequest Pydantic models, an unauthenticated attacker can send a single HTTP request with an astronomically large n value. This completely blocks the Python asyncio event loop and causes immediate Out-Of-Memory crashes by allocating millions of request object copies in the heap before the request even reaches the scheduling queue. The root cause lies in missing upper bound checks during request parsing and asynchronous scheduling. The vulnerability impacts any individual or organization hosting a public-facing vLLM API server and SaaS/AI-as-a-Service platforms acting as reverse proxies without strict HTTP body payload validation or rate limitations.

Recommendations Update to version 0.19.0 or later.

Fix

DoS

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2026-34756

GHSA-3MWP-WVH9-7528

Affected Products

Vllm

References · 7

• https://github.com/vllm-project/vllm/commit/b111f8a61f100fdca08706f41f29ef3548de7380 · Patch
• https://github.com/vllm-project/vllm/pull/37952 · Patch
• https://github.com/vllm-project/vllm/security/advisories/GHSA-3mwp-wvh9-7528 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-34756 · Security Note
• https://osv.dev/vulnerability/GHSA-3mwp-wvh9-7528 · Vendor Advisory
• https://github.com/vllm-project/vllm · Note
• https://twitter.com/CVEnew/status/2041223990404931651 · Twitter Post