CVE-2026-105757

[CVE catalog]

Severity

Medium · CVSS 6.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Published

Sep 23, 2026, 10:00:00 PM UTC

Updated

Oct 5, 2026, 11:17:02 PM UTC

Source

[NVD] · [CVE record]

EPSS

0.31% · Oct 25, 2026

A flaw was found in vLLM. A remote authenticated attacker can cause a Denial of Service (DoS) by submitting specially crafted structured-output requests. Due to improper exception handling around structured-output processing, certain request-level errors fail to be contained and propagate directly into the core engine. This unhandled failure triggers a fatal error that terminates the shared engine process, disrupting service for all active and subsequent users. vllm: vllm: Denial of Service via unhandled structured-output errors A moderate-impact denial of service flaw was found in the vLLM inference and serving engine, as shipped in Red Hat AI Inference Server 3, Red Hat Enterprise Linux AI, and Red Hat OpenShift AI (RHOAI). A remote attacker with standard authenticated access to the vLLM API can submit specially crafted structured-output (constrained-generation) requests. Due to improper exception handling around structured-output processing — for example a grammar compilation failure re-raised on a latched backend, negative draft-token padding from the ngram_gpu speculative-decoding mode reaching guidance validation, or empty structured-output values admitted by the Rust frontend that the Python frontend rejects — request-level errors are not contained per request but propagate uncaught into the shared EngineCore process, which treats them as fatal and terminates. This disrupts service for all concurrent and subsequent users of the engine until it is restarted. Red Hat rates this flaw Moderate severity (CVSS 6.5, CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H), consistent with the upstream assessment. The affected Red Hat AI Inference Server 3, Red Hat Enterprise Linux AI, and Red Hat OpenShift AI streams are marked AFFECTED with the fix deferred because the severity is Moderate with a CVSS score below 7.0; the residual risk is that an authenticated API client can terminate the shared engine process, causing denial of service for all users until the service is restarted. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.