---
id: CVE-2026-116181
title: >-
  vllm: vllm: Denial of Service via unvalidated stop token identifiers
  (CVE-2026-116181)
summary: >-
  A flaw was found in vllm. An authenticated remote attacker could cause a
  Denial of Service (DoS) or memory corruption by submitting requests containing
  invalid stop token identifiers. Because the application does not verify
  whether provide…
severity: medium
cvss: 6.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
cvssSource: vendor
cwe:
  - CWE-787
  - CWE-129
vendor: Red Hat
product: Red Hat AI Inference Server
affected:
  - ai_inference_server
  - enterprise_linux_ai_rhel_ai 3
  - openshift_ai_rhoai
published: '2026-10-25'
updated: '2026-10-25'
sourceUpdated: '2026-10-25T13:50:01+00:00'
source: CSAF
sourceUrl: 'https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116181.json'
references:
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116181.json
  - url: 'https://access.redhat.com/security/cve/CVE-2026-116181'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2560405'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-116181'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-116181'
  - url: >-
      https://github.com/vllm-project/vllm/security/advisories/GHSA-w9r6-29q4-pvpr
  - url: >-
      https://www.vulncheck.com/advisories/vllm-0.20.1-before-0.29.0-dos-and-gpu-out-of-bounds-write-via-stop-token-ids
tags:
  - csaf
  - vex
  - red-hat
  - cve.org
ingestedAt: '2026-10-25T22:08:29.945Z'
epss: 0.00366
epssPercentile: 0.30238
---

## Overview

A flaw was found in vllm. An authenticated remote attacker could cause a Denial of Service (DoS) or memory corruption by submitting requests containing invalid stop token identifiers. Because the application does not verify whether provided stop tokens fall within the model's vocabulary range, indexing these values can crash the inference engine or trigger an out-of-bounds write in GPU memory.

## Vendor advisories

- **Red Hat VEX** · Moderate · affected: Red Hat AI Inference Server, Red Hat Enterprise Linux AI (RHEL AI) 3, Red Hat OpenShift AI (RHOAI) · no fix planned: Red Hat AI Inference Server, Red Hat Enterprise Linux AI (RHEL AI) 3, Red Hat OpenShift AI (RHOAI) · updated 2026-10-25 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116181.json)

**vllm: vllm: Denial of Service via unvalidated stop token identifiers** — rated Moderate by Red Hat. Released 2026-10-25.

Affected:

- Red Hat AI Inference Server
- Red Hat Enterprise Linux AI (RHEL AI) 3
- Red Hat OpenShift AI (RHOAI)

No fix planned:

- Red Hat AI Inference Server
- Red Hat Enterprise Linux AI (RHEL AI) 3
- Red Hat OpenShift AI (RHOAI)

## Remediation

Fix deferred