CVE-2026-93592

{
  "etk_id": "ETK-2026-1167",
  "cve_id": "CVE-2026-93592",
  "display_id": "CVE-2026-93592",
  "ghsa_id": "GHSA-25q3-v2hm-8vpf",
  "euvd_id": "EUVD-2026-82911",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Unauthenticated denial of service in vLLM embedding and pooling APIs",
  "summary": "vLLM versions before 0.28.0 accept negative token IDs through the token-ID input form of the embedding and pooling APIs. An unauthenticated remote client able to reach those endpoints can stop the serving engine, causing subsequent requests to fail until the process is restarted. Deployments are affected when untrusted callers can submit token-ID input to these endpoints.",
  "mitigation": "Upgrade vLLM to version 0.28.0 or later. Until upgraded, reject negative integer values in input at an API gateway, accept only string input from untrusted clients, and restrict access to the embedding and pooling endpoints.",
  "vendor": "pip",
  "product": "vllm",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        "< 0.28.0"
      ],
      "ecosystem": "pip",
      "fixed_versions": [
        "0.28.0"
      ],
      "package_name": "vllm",
      "purl": "pkg:pypi/vllm"
    }
  ],
  "cwes": null,
  "cvss_score": 7.5,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
  "epss_score": 0.0054,
  "epss_percentile": 0.4461,
  "epss_asof": "2026-10-20",
  "automation": "deterministic",
  "check": true,
  "check_confidence_basis": "differential",
  "exploit": false,
  "pipeline_minutes": 45.80855565,
  "t0_at": "2026-09-18T13:20:05.365000+00:00",
  "signals": {
    "check": {
      "at": "2026-10-10T14:47:29.617801+00:00",
      "days": 22.060697370381945,
      "is_lower_bound": false,
      "measured_at": "2026-09-18T13:20:05.365000+00:00",
      "url": null
    },
    "public_poc": {
      "at": "2026-09-03T18:08:31+00:00",
      "days": -14.799703298611112,
      "is_lower_bound": false,
      "measured_at": "2026-09-18T13:20:05.365000+00:00",
      "url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-25q3-v2hm-8vpf"
    },
    "trigger_signal": {
      "at": "2026-09-18T13:20:05.365000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-09-18T13:20:05.365000+00:00",
      "url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-25q3-v2hm-8vpf"
    }
  }
}