CVE-2026-93592: vLLM before 0.28.0 Denial of Service via negative token ID

Vulnerability summary

CVE-2026-93592 is a high (CVSS 8.7) Improper Validation of Array Index vulnerability in vllm-project vllm. EPSS estimates a 0.54% chance of exploitation in the next 30 days, higher than 44.9% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 18-09-2026
   PublishedVulnerability first disclosed.
2. 18-09-2026
   Last modifiedVulnerability information updated.

Description

vLLM versions before 0.28.0 fail to validate the lower bound of token IDs in the /v1/embeddings and /pooling endpoints, allowing unauthenticated attackers to crash the engine by submitting negative token IDs. A single request with a negative token ID triggers a CUDA device-side assertion that poisons the GPU context, causing all subsequent requests to fail until the process restarts.

• CWE-129Improper Validation of Array IndexThe product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.