Vulnerability PYSEC-2026-3997

Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
10 days ago
September 18, 2026 at 02:19 PM UTC
No summary available
0.0.1 - 0.27.1
0.0.1 - 0.27.1

Details

vLLM versions before 0.28.0 fail to validate the lower bound of token IDs in the /v1/embeddings and /pooling endpoints, allowing unauthenticated attackers to crash the engine by submitting negative token IDs. A single request with a negative token ID triggers a CUDA device-side assertion that poisons the GPU context, causing all subsequent requests to fail until the process restarts.

Impacted packages

Timeline

Published
10 days ago
September 18, 2026 at 02:19 PM UTC
Fixed (0.28.0)
1 month ago
August 26, 2026 at 10:07 AM UTC
Last Modified
2 hours ago
September 29, 2026 at 09:00 AM UTC