CVE-2026-105757 | vllm-project vLLM up to 0.29.x EngineCore input validation

October 6, 2026 Yanac

A vulnerability categorized as problematic has been discovered in vllm-project vLLM up to 0.29.x. The affected element is an unknown function of the component EngineCore. Executing a manipulation can lead to improper input validation.

This vulnerability appears as CVE-2026-105757. The attack may be performed from remote. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More