CVE-2026-105755

[CVE catalog]

Severity

Medium · CVSS 4.2CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L

Published

Sep 23, 2026, 10:00:00 PM UTC

Updated

Oct 5, 2026, 11:17:02 PM UTC

Source

[NVD] · [CVE record]

EPSS

0.20% · Oct 25, 2026

A flaw was found in vLLM. When handling flash late-interaction scoring and reranking requests, internal cache keys are derived directly from user-supplied request identifiers. A remote attacker can exploit this issue by submitting concurrent requests reusing a victim's request identifier to overwrite cached query data. Consequently, this flaw allows attackers to corrupt the scoring results returned to legitimate users or cause a denial of service (DoS) through transient cache errors. vllm: vllm: Scoring result corruption via user-controlled request identifier A moderate severity flaw was found in vLLM, the inference and serving engine used by Red Hat AI Inference Server and Red Hat OpenShift AI (RHOAI). When handling flash late-interaction scoring and reranking requests at the /score and /rerank endpoints, vLLM caches each request's query embedding under a key derived from the caller-controlled X-Request-Id header. A remote attacker with API client access who obtains or predicts a victim's request identifier and submits a precisely timed concurrent request reusing it can overwrite the victim's cached query embedding, so the victim's documents are scored against the attacker's query and the scoring results returned to the victim are corrupted. Collisions on shared use counters can also trigger transient late-interaction cache-miss errors, causing denial of service for individual requests. The flaw does not disclose confidential information to the attacker. Red Hat and upstream both rate this issue moderate severity with a CVSS 3.1 score of 4.2 (AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L). Red Hat has deferred a fix for the affected Red Hat AI Inference Server and Red Hat OpenShift AI releases because the impact is moderate and the CVSS score is below 7.0; the residual risk is limited to corruption of individual scoring or reranking responses and transient request failures. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.