{"id":"CVE-2026-114051","title":"vllm: vllm: Denial of Service via improper token parameter validation (CVE-2026-114051)","summary":"A flaw was found in vllm. A remote attacker can cause a Denial of Service (DoS) by sending a specially crafted inference request containing an oversized minimum token parameter and an omitted maximum token parameter. Due to improper input …","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvssSource":"vendor","cwe":"CWE-248","vendor":"Red Hat","product":"Red Hat AI Inference Server","affected":["ai_inference_server","enterprise_linux_ai_rhel_ai 3","openshift_ai_rhoai"],"published":"2026-10-21","updated":"2026-10-22","sourceUpdated":"2026-10-22T22:11:06+00:00","source":"CSAF","sourceUrl":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114051.json","references":[{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114051.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-114051"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2558051"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-114051"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-114051"},{"url":"https://github.com/vllm-project/vllm/security/advisories/GHSA-4xqp-c3mv-qff7"},{"url":"https://www.vulncheck.com/advisories/vllm-before-0.31.0-denial-of-service-via-min-tokens-in-inference-v1-generate"}],"tags":["csaf","vex","red-hat","cve.org"],"epss":0.00375,"epssPercentile":0.31253,"ingestedAt":"2026-10-21T01:37:08.043Z","slug":"CVE-2026-114051","body":"## Overview\n\nA flaw was found in vllm. A remote attacker can cause a Denial of Service (DoS) by sending a specially crafted inference request containing an oversized minimum token parameter and an omitted maximum token parameter. Due to improper input validation, this request triggers an unhandled exception that terminates the backend processing thread. Consequently, all subsequent generation requests hang indefinitely while health monitoring endpoints continue to report a healthy status, requiring a manual restart to restore service.\n\n## Vendor advisories\n\n- **Red Hat VEX** · Important · affected: Red Hat AI Inference Server, Red Hat Enterprise Linux AI (RHEL AI) 3, Red Hat OpenShift AI (RHOAI) · no fix planned: Red Hat AI Inference Server, Red Hat Enterprise Linux AI (RHEL AI) 3, Red Hat OpenShift AI (RHOAI) · updated 2026-10-22 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114051.json)\n\n**vllm: vllm: Denial of Service via improper token parameter validation** — rated Important by Red Hat. Released 2026-10-21, updated 2026-10-22.\n\nAffected:\n\n- Red Hat AI Inference Server\n- Red Hat Enterprise Linux AI (RHEL AI) 3\n- Red Hat OpenShift AI (RHOAI)\n\nNo fix planned:\n\n- Red Hat AI Inference Server\n- Red Hat Enterprise Linux AI (RHEL AI) 3\n- Red Hat OpenShift AI (RHOAI)\n\nNot affected:\n\n- Red Hat OpenShift AI (RHOAI)\n\n## Remediation\n\nAffected","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":41.3,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}