CVE-2026-116180 | vllm-project vLLM up to 0.30.x LogprobsTensors vllm/v1/outputs.py LogprobsTensors.empty_cpu missing initialization

October 25, 2026 Yanac

A vulnerability classified as problematic has been found in vllm-project vLLM up to 0.30.x. The impacted element is the function LogprobsTensors.empty_cpu of the file vllm/v1/outputs.py of the component LogprobsTensors. The manipulation leads to missing initialization of a variable.

This vulnerability is uniquely identified as CVE-2026-116180. The attack is possible to be carried out remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More