CVE-2026-116173 | vllm-project vLLM up to 0.23.x Rust gRPC frontend output_logprobs/output_candidates.token_ids denial of service

SecurityVulns
Yanac

A vulnerability marked as problematic has been reported in vllm-project vLLM up to 0.23.x. Affected is an unknown function of the component Rust gRPC frontend. The manipulation of the argument output_logprobs/output_candidates.token_ids leads to denial of service.

This vulnerability is uniquely identified as CVE-2026-116173. The attack is possible to be carried out remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More