CVE-2026-44222
- Source
- https://cve.org/CVERecord?id=CVE-2026-44222
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-44222.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-44222
- Aliases
- Downstream
CGA (10)
MINI (1)
- Published
- 2026-05-12T19:57:25Z
- Modified
- 2026-10-21T02:57:57Z
- Severity
-
- 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- vLLM: Remote DoS via Special-Token Placeholders
- Details
-
vLLM is an inference and serving engine for large language models (LLMs). From 0.6.1 to before 0.20.0, there is a a Token Injection vulnerability in vLLM’s multimodal processing. Unauthenticated, text-only prompts that spell special tokens are interpreted as control. Image and video placeholder sequences supplied without matching data cause vLLM to index into empty grids during input-position computation, raising an unhandled IndexError and terminating the worker or degrading availability. Multimodal paths that rely on image_grid_thw/video_grid_thw are affected. This vulnerability is fixed in 0.20.0.
- Database specific
{ "cna_assigner": "GitHub_M", "cwe_ids": [ "CWE-129" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/44xxx/CVE-2026-44222.json" }- References
Affected packages
Git / github.com/vllm-project/vllm
Affected ranges
- Type
- GIT
- Repo
- https://github.com/vllm-project/vllm
- Events
- Database specific
-
Show details
{ "extracted_events": [ { "range": [ { "introduced": "0.6.1" }, { "fixed": "0.20.0" } ], "source": "AFFECTED_FIELD", "strategy": "StringRangeExpression" }, { "cpe": "cpe:2.3:a:vllm:vllm:*:*:*:*:*:*:*:*", "range": [ { "introduced": "0.6.1" }, { "fixed": "0.20.0" } ], "source": "CPE_RANGE" } ] }
Affected versions
v0.*
v0.10.0
v0.10.0rc1
v0.10.0rc2
v0.10.1rc1
v0.10.2rc1
v0.10.2rc2
v0.11.0rc1
v0.11.1
v0.11.1rc0
v0.11.1rc1
v0.11.1rc2
v0.11.1rc3
v0.11.1rc4
v0.11.1rc5
v0.11.1rc6
v0.13.0rc1
v0.14.0rc0
v0.14.0rc1
v0.15.0rc1
v0.15.2rc0
v0.16.0rc0
v0.16.0rc1
v0.17.0rc0
v0.17.1rc0
v0.17.2rc0
v0.18.0rc0
v0.18.1rc0
v0.18.2rc0
v0.19.1rc0
v0.19.2rc0
v0.6.1
v0.6.1.post1
v0.6.1.post2
v0.6.2
v0.6.3
v0.6.3.post1
v0.6.4
v0.6.4.post1
v0.6.5
v0.6.6
v0.6.6.post1
v0.7.0
v0.7.1
v0.7.2
v0.7.3
v0.8.0rc1
v0.8.0rc2
v0.8.1
v0.8.2
v0.8.3rc1
v0.8.4
v0.9.0
v0.9.1
v0.9.1rc1
v0.9.1rc2
v0.9.2rc1