CVE-2026-114051 | vllm-project vLLM up to 0.30.x EngineCore /inference/v1/generate max_tokens/min_tokens resource consumption

A vulnerability classified as problematic has been found in vllm-project vLLM up to 0.30.x. The affected element is an unknown function of the file /inference/v1/generate of the component EngineCore. Performing a manipulation of the argument max_tokens/min_tokens results in resource consumption.

This vulnerability is identified as CVE-2026-114051. The attack can be initiated remotely. There is not any exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More