CVE-2026-54235: vllm-project vllm
Vulnerability summary
CVE-2026-54235 is a medium (CVSS 6.9) vulnerability in vllm-project vllm. EPSS estimates a 0.45% chance of exploitation in the next 30 days, higher than 38% of scored vulnerabilities. 1 public exploit is recorded.
Advisory lineage
Upstream 0 · Downstream 0 · Related 1Timeline
- 22-06-2026PublishedVulnerability first disclosed.
- 23-06-2026Last modifiedVulnerability information updated.
Description
vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.23.1rc0, ll temperature validation gates use comparison operators (<, >), which silently evaluate to False for NaN and for positive Infinity in Python's IEEE 754 float semantics. Both values pass every guard and propagate to GPU sampling kernels, where they produce undefined behavior or CUDA errors that can crash the inference worker. This vulnerability is fixed in 0.23.1rc0.
CVSS metrics
5 scores · 4 sources · 2 versions- OSV · PypiEcosystem advisory · calculated6.9MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
- OSV · ChainguardEcosystem advisory · calculated6.9MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
- NVDNIST6.9MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
EPSS trend
Probability
0.45%
Chance of exploitation in the next 30 days
Percentile
38%
Versus all other CVEs
30-day change
0.00 pp
From 0.45% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundVllm
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Chainguard16 products
- lmcache-cuda-12.8All versions (No fix recorded)
- nemo-rl-cuda-13.0-vllmAll versions (No fix recorded)
- py3.10-vllm-cuda-12.4< 0.18.1-r5
- py3.10-vllm-cuda-12.9All versions (No fix recorded)
- py3.10-vllm-cuda-13.0All versions (No fix recorded)
PyPI1 product
- vllm≥ 0.8.5, < 0.24.0 | ≤ 0.23.0
Vllm1 product
- vllm< 0.23.1
Vllm-project1 product
- vllm< 0.23.1rc0
4 vendors · 19 products
References
9 links- github.com/vllm-project/vllm/security/advisories/GHSA-7h4p-rffg-7823X Refsource CONFIRMWEBAdvisoryExploitThird Party Advisory
- github.com/vllm-project/vllm/commit/d598d239737cfa37bcfcb98886ec3f3557fc7198X Refsource MISCWEBFIXPatch
- github.com/vllm-project/vllmPACKAGE