vLLM is an inference and serving engine for large language models. Prior to 0.30.0, the /inference/v1/generate endpoint in the disaggregated scale-out path accepts caller-supplied tensors in the features.kwargs_data field, cache identifiers in the features.mm_hashes field, ranges in the features.mm_placeholders field, and wire-selected multimodal field processors without rebinding them to the active model renderer contract. Forged grid geometry, field types, or non-positive placeholder lengths can terminate the shared EngineCore; when an attacker knows or can induce a victim's content hash, forged cache hashes can poison or retrieve cross-request encoder-cache state; and dropped sparse placeholder masks can alter replayed transport semantics. This issue is fixed in version 0.30.0.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - vLLM is an inference and serving engine for large language models. Prior to 0.30.0, the
    /inference/v1/generate endpoint in the disaggregated scale-out path accepts caller-supplied tensors in the
    features.kwargs_data field, cache identifiers in the features.mm_hashes field, ranges in the
    features.mm_placeholders field, and wire-selected multimodal field processors without rebinding them to
    the active model renderer contract. Forged grid geometry, field types, or non-positive placeholder lengths
    can terminate the shared EngineCore; when an attacker knows or can induce a victim's content hash, forged
    cache hashes can poison or retrieve cross-request encoder-cache state; and dropped sparse placeholder
    masks can alter replayed transport semantics. This issue is fixed in version 0.30.0. (CVE-2026-105754)

ID	Name	Product	Family	Type	Severity
476116	Chainguard: vllm-openai-cuda-13.0: security update to 0.31.0-r0	Tenable Cloud Security	Chainguard Local Security Checks	Local	medium
476116	Chainguard: vllm-openai-cuda-13.0: security update to 0.31.0-r0	Tenable Self-Hosted Container Security	Chainguard Local Security Checks	Local	medium
472971	SCA: security update for vllm (GHSA-ph72-cqr5-qpp7)	Tenable Cloud Security	SCA Checks	Local	medium
472971	SCA: security update for vllm (GHSA-ph72-cqr5-qpp7)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium

Detections

Analytics

CVE-2026-105754

medium

Tenable Plugins

medium

medium

medium

medium