← Vulnerability feed

Vulnerability record · CVE-2026-105755 · published 5 October 2026

CVE-2026-105755: Vllm insecure direct object reference vulnerability

Vllm · Vllm

vLLM is an inference and serving engine for large language models. Prior to 0.30.0, flash late-interaction scoring at the /score and /rerank endpoints derives each worker's query_key value from the caller-controlled X-Request-Id header. A concurrent request that reuses a victim's identifier can overwrite the cached query embedding so the victim's documents are scored against the attacker's query, and shared use counters can also cause a late-interaction cache-miss error. This issue is fixed in version 0.30.0.

4.2 CVSS 3.1 Medium EPSS 0.20% · top 90.5% CWE-639 · Insecure direct object reference
4.2CVSS 3.1 base score
0.20%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References
8 Oct 2026Last modified by NVD

Description

vLLM is an inference and serving engine for large language models. Prior to 0.30.0, flash late-interaction scoring at the /score and /rerank endpoints derives each worker's query_key value from the caller-controlled X-Request-Id header. A concurrent request that reuses a victim's identifier can overwrite the cached query embedding so the victim's documents are scored against the attacker's query, and shared use counters can also cause a late-interaction cache-miss error. This issue is fixed in version 0.30.0.

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/vllm-project/vllm/commit/ee17d0d869203ef9a35ad73358a4987bba14b1fc Patch
https://github.com/vllm-project/vllm/pull/51445 Issue TrackingPatch
https://github.com/vllm-project/vllm/releases/tag/v0.30.0 Release Notes
https://github.com/vllm-project/vllm/security/advisories/GHSA-2phq-3phc-84px Vendor Advisory

Track CVE-2026-105755 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2026-25960Vllm server-side request forgery (ssrf) vulnerabilityvLLM is an inference and serving engine for large language models (LLMs). The SSRF protection fix for CVE-2026-24779 add in 0.15.1 can be bypassed in…EPSS 0.75%9.8CVE-2026-22778Vllm sensitive information in log file vulnerabilityvLLM is an inference and serving engine for large language models (LLMs). From 0.8.3 to before 0.14.1, when an invalid image is sent to vLLM's multim…EPSS 11%9.8CVE-2026-22807Vllm code injection vulnerabilityvLLM is an inference and serving engine for large language models (LLMs). Starting in version 0.10.1 and prior to version 0.14.0, vLLM loads Hugging …EPSS 0.83%9.8CVE-2025-47277Vllm deserialization of untrusted data vulnerabilityvLLM, an inference and serving engine for large language models (LLMs), has an issue in versions 0.6.5 through 0.8.4 that ONLY impacts environments u…EPSS 0.96%9.8CVE-2025-32444Vllm deserialization of untrusted data vulnerabilityvLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Versions starting from 0.6.5 and prior to 0.8.5, having vLLM in…EPSS 1.8%9.8CVE-2024-11041Vllm deserialization of untrusted data vulnerabilityvllm-project vllm version v0.6.2 contains a vulnerability in the MessageQueue.dequeue() API function. The function uses pickle.loads to parse receive…EPSS 1.6%9.1CVE-2026-48746Vllm http request smuggling vulnerabilityvLLM is an inference and serving engine for large language models (LLMs). From 0.3.0 until 0.22.0, a vulnerability in ASGI web servers and starlette'…EPSS 1.2%9.0CVE-2025-29783Vllm deserialization of untrusted data vulnerabilityvLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. When vLLM is configured to use Mooncake, unsafe deserialization…EPSS 0.73%

Source: NIST National Vulnerability Database (record CVE-2026-105755), CISA KEV, FIRST EPSS (scores of 2026-10-07). This page is refreshed as NVD updates the record.