CVE-2026-93592
HIGH
NVD
CVSS Score
7.5
Severity
HIGH
Published
Sep 18, 2026
Vendor
unknown
Description
vLLM versions before 0.28.0 fail to validate the lower bound of token IDs in the /v1/embeddings and /pooling endpoints, allowing unauthenticated attackers to crash the engine by submitting negative token IDs. A single request with a negative token ID triggers a CUDA device-side assertion that poisons the GPU context, causing all subsequent requests to fail until the process restarts.