{"id":"CVE-2026-116181","title":"vllm: vllm: Denial of Service via unvalidated stop token identifiers (CVE-2026-116181)","summary":"A flaw was found in vllm. An authenticated remote attacker could cause a Denial of Service (DoS) or memory corruption by submitting requests containing invalid stop token identifiers. Because the application does not verify whether provide…","severity":"medium","cvss":6.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvssSource":"vendor","cwe":["CWE-787","CWE-129"],"vendor":"Red Hat","product":"Red Hat AI Inference Server","affected":["ai_inference_server","enterprise_linux_ai_rhel_ai 3","openshift_ai_rhoai"],"published":"2026-10-25","updated":"2026-10-25","sourceUpdated":"2026-10-25T13:50:01+00:00","source":"CSAF","sourceUrl":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116181.json","references":[{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116181.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-116181"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2560405"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-116181"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-116181"},{"url":"https://github.com/vllm-project/vllm/security/advisories/GHSA-w9r6-29q4-pvpr"},{"url":"https://www.vulncheck.com/advisories/vllm-0.20.1-before-0.29.0-dos-and-gpu-out-of-bounds-write-via-stop-token-ids"}],"tags":["csaf","vex","red-hat","cve.org"],"ingestedAt":"2026-10-25T22:08:29.945Z","epss":0.00366,"epssPercentile":0.30238,"slug":"CVE-2026-116181","body":"## Overview\n\nA flaw was found in vllm. An authenticated remote attacker could cause a Denial of Service (DoS) or memory corruption by submitting requests containing invalid stop token identifiers. Because the application does not verify whether provided stop tokens fall within the model's vocabulary range, indexing these values can crash the inference engine or trigger an out-of-bounds write in GPU memory.\n\n## Vendor advisories\n\n- **Red Hat VEX** · Moderate · affected: Red Hat AI Inference Server, Red Hat Enterprise Linux AI (RHEL AI) 3, Red Hat OpenShift AI (RHOAI) · no fix planned: Red Hat AI Inference Server, Red Hat Enterprise Linux AI (RHEL AI) 3, Red Hat OpenShift AI (RHOAI) · updated 2026-10-25 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116181.json)\n\n**vllm: vllm: Denial of Service via unvalidated stop token identifiers** — rated Moderate by Red Hat. Released 2026-10-25.\n\nAffected:\n\n- Red Hat AI Inference Server\n- Red Hat Enterprise Linux AI (RHEL AI) 3\n- Red Hat OpenShift AI (RHOAI)\n\nNo fix planned:\n\n- Red Hat AI Inference Server\n- Red Hat Enterprise Linux AI (RHEL AI) 3\n- Red Hat OpenShift AI (RHOAI)\n\n## Remediation\n\nFix deferred","depth":"sunlit","depthScore":36,"depthScoreParts":{"impact":35.8,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}