CVE-2026-94622CWE-248

CVE-2026-94622

High · published September 22, 2026

CVSS v3.1
7.5
EPSS
1%
Percentile
49.4
In the wild
Unconfirmed
What it is

vLLM versions through 0.29.0 contain a denial of service vulnerability in the NIXL connector's metadata handling for prefill/decode disaggregated deployments. Attackers can send requests with incomplete kv_transfer_params dictionary entries to trigger an uncaught KeyError in EngineCore scheduling, causing the decode engine to terminate and making all routed requests fail until manual restart.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
8.7 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00627 · 49.4th percentile
Weakness
CWE-248 · Uncaught Exception
Published
2026-09-22T02:17Z
Affected products (1)
ProductVersionsFixed in
vllm/vllm≤ 0.29.0—
References (4)
https://github.com/vllm-project/vllm · [email protected]https://github.com/vllm-project/vllm/blob/v0.29.0/vllm/distributed/kv_transfer/kv_connector/v1/nixl/metadata.py#L294-L312 · [email protected]https://github.com/vllm-project/vllm/pull/54807 · [email protected]https://www.vulncheck.com/advisories/vllm-through-0.29.0-denial-of-service-via-incomplete-nixl-kv-transfer-metadata · [email protected]
EPSS history
Timeline
  • 23 SEP 03:49Z
    EPSS moved — → 0%
    epss
  • 21 SEP 22:04Z
    vLLM through 0.29.0 Denial of Service via Incomplete NIXL KV Transfer Metadata
    cvelistv5