CVE-2026-90878 | vllm-project vLLM up to 0.27.1 Jinja Template Rendering /v1/chat/completions chat_template resource consumption (Issue 52025)

A vulnerability was found in vllm-project vLLM up to 0.27.1. It has been classified as problematic. This affects an unknown part of the file /v1/chat/completions of the component Jinja Template Rendering. This manipulation of the argument chat_template causes resource consumption.

This vulnerability is handled as CVE-2026-90878. The attack can be initiated remotely. Additionally, an exploit exists.

The pull request to fix this issue awaits acceptance.VulDB Recent EntriesRead More