CVE-2026-115916 | vllm-project vLLM up to 0.31.x Tokenization vllm/tokenizers/hf.py VocabParallelEmbedding.forward off-by-one

A vulnerability, which was classified as problematic, was found in vllm-project vLLM up to 0.31.x. The impacted element is the function VocabParallelEmbedding.forward of the file vllm/tokenizers/hf.py of the component Tokenization. Such manipulation leads to off-by-one.

This vulnerability is traded as CVE-2026-115916. The attack may be launched remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More