CVE-2026-55514— vLLM denial of service via prompt embeds on M-RoPE models
Possible ATT&CK Techniques 1AI
T1499 · Endpoint Denial of ServiceAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| vllm-project | vllm | >= 0.12.0, < 0.24.0 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-55514
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
vLLM denial of service via prompt embeds on M-RoPE models
Source: NVD (National Vulnerability Database)
Vulnerability Description
vLLM is a library for LLM inference and serving. From 0.12.0 to before 0.24.0, sending a pure prompt embeds payload in a /v1/completions request with a model using M-RoPE causes EngineCore to fail an assertion and fatally crash, shutting down the entire server application. Any remote user who is authorized to make a /v1/completions request can make such a request and induce a crash. This issue is fixed in version 0.24.0.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
可达断言
Source: NVD (National Vulnerability Database)
Vulnerability Title
vLLM 异常处理不当漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
vLLM是vLLM团队开源的一个适用于 LLM 的高吞吐量和内存高效推理和服务引擎。 vLLM 0.12.0版本至0.24.0之前版本存在异常处理不当漏洞，该漏洞源于向 /v1/completions 请求中发送纯提示嵌入有效载荷，会导致 EngineCore 断言失败并崩溃，造成远程授权用户可使服务器应用程序关闭。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| vllm-project | vllm | >= 0.12.0, < 0.24.0 | - |
II. Public POCs for CVE-2026-55514
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-55514
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-55514 (2)
Vendor Advisories for CVE-2026-55514 (1)
Other References for CVE-2026-55514 (1)
- 🔗 Release v0.24.0 · vllm-project/vllm · GitHubx_refsource_MISC
Same Patch Batch · vllm-project · 2026-07-06 · 4 CVEs total
| CVE-2026-54234 | 7.5 HIGH | vLLM: Remote DoS in vLLM via Invalid Recovered Token Reinjection |
| CVE-2026-55646 | 6.5 MEDIUM | vLLM speech-to-text endpoints allocate full upload before enforcing the audio file-size li |
| CVE-2026-55574 | vLLM: ReDoS via structured_outputs.regex compiled without timeout in xgrammar and outlines |
IV. Related Vulnerabilities
Same product: vllm
- CVE-2026-55574
vLLM: ReDoS via structured_outputs.regex compiled without ti - CVE-2026-54234
vLLM: Remote DoS in vLLM via Invalid Recovered Token Reinjec - CVE-2026-55646
vLLM speech-to-text endpoints allocate full upload before en - CVE-2026-47155
vLLM: Artifact Pin Decay in vLLM allows pinned deployments t - CVE-2026-41523
vLLM: Security Check Bypass via assert Statement in Activati
Same vendor: vllm-project
- CVE-2026-55574
vLLM: ReDoS via structured_outputs.regex compiled without ti - CVE-2026-54234
vLLM: Remote DoS in vLLM via Invalid Recovered Token Reinjec - CVE-2026-55646
vLLM speech-to-text endpoints allocate full upload before en - CVE-2026-47155
vLLM: Artifact Pin Decay in vLLM allows pinned deployments t - CVE-2026-41523
vLLM: Security Check Bypass via assert Statement in Activati
Same weakness: CWE-617
- CVE-2026-13122
OpenVPN 异常处理不当漏洞 - CVE-2026-9718
Schneider Electric PowerLogic™ P7 异常处理不当漏洞 - CVE-2026-47146
Color Control color-temperature assertion abort in EmberZNet - CVE-2026-47145
Color Control hue/saturation assertion abort in EmberZNet v9 - CVE-2026-52718
Gstreamer1-plugins-bad-free: gstreamer: denial of service vi
V. Comments for CVE-2026-55514
No comments yet