01 Record

CVE-2026-73559

vLLM: Completion prompt lists fan out into unbounded engine requests

MediumPUBLISHEDCNA: GitHub_M

Base score6.5 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

02 Description

vLLM: Completion prompt lists fan out into unbounded engine requests

Published: 2026-08-13 15:09Z1 DAY AGO
Last updated: 2026-08-14 16:51Z1 HR AGO
Reserved: 2026-08-12
Assigning CNA: GitHub_M
Record state: PUBLISHED
Severity: Medium (CVSS 6.5)
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weaknesses: CWE-400
SSVC decision: ExploitationpocAutomatablenoTechnical Impactpartial
Data version: 5.2
Document digest: 2e98b37d798ae7acd78128337f47d42bd0d644a76ce214d692a05209aa50fd05

VendorProductVersionsPlatforms

vllm-projectvllm>= 0.19.0, < 0.26.0—