CVE-2026-105757: vllm-project vllm Improper Input Validation
Vulnerability summary
CVE-2026-105757 is a medium (CVSS 6.5) Improper Input Validation vulnerability in vllm-project vllm. EPSS estimates a 0.31% chance of exploitation in the next 30 days, higher than 22.9% of scored vulnerabilities.
Timeline
- 05-10-2026PublishedVulnerability first disclosed.
- 06-10-2026Last modifiedVulnerability information updated.
Description
vLLM is an inference and serving engine for large language models. Prior to 0.30.0, structured-output request failures can escape request-scoped validation and reach the EngineCore fatal-error path. A per-request backend mismatch can re-raise a grammar compilation exception, padding produced by the ngram_gpu speculative-decoding mode can pass a negative token to guidance validation, and the Rust frontend can admit empty structured-output values that the Python frontend rejects, allowing ordinary constrained-generation requests to terminate the shared engine. This issue is fixed in version 0.30.0.
CVSS metrics
4 scores · 4 sources · 1 version- OSV · PypiEcosystem advisory · calculated6.5MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- OSV · ChainguardEcosystem advisory · calculated6.5MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- NVDNIST6.5MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
0.31%
Chance of exploitation in the next 30 days
Percentile
23%
Versus all other CVEs
30-day change
Change unavailable
Change unavailable
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-20Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
- CWE-248Uncaught ExceptionAn exception is thrown from a function, but it is not caught.
- CWE-755Improper Handling of Exceptional ConditionsThe product does not handle or incorrectly handles an exceptional condition.
Affected systems
Chainguard8 products
- kserve-huggingfaceserver-cuda-13.3All versions (No fix recorded)
- lmcache-cuda-12.8All versions (No fix recorded)
- nemo-rl-cuda-13.0-vllmAll versions (No fix recorded)
- py3.10-vllm-cuda-12.4All versions (No fix recorded)
- py3.12-vllm-cuda-12.4All versions (No fix recorded)
PyPI1 product
- vllm< 0.30.0
Vllm1 product
- vllm< 0.30.0
Vllm-project1 product
- vllm< 0.30.0
4 vendors · 11 products
References
7 links- github.com/vllm-project/vllm/security/advisories/GHSA-85xf-c7hm-whqwX Refsource CONFIRMWEBAdvisoryMitigationVendor Advisory
- github.com/vllm-project/vllm/commit/c55e15a44ec4127832d4a86928a356fdd9e68dbdX Refsource MISCWEBFIXPatch
- github.com/vllm-project/vllmPACKAGE
