CVE-2026-55514: vLLM denial of service via prompt embeds on M-RoPE models
Short summary of the problem. Make the impact and severity as clear as possible. For example: An unsafe deserialization vulnerability allows any unauthenticated user to execute arbitrary code on the server.
Sending a pure prompt embeds payload in a /v1/completions request with a model using M-RoPE causes the EngineCore to fail an assertion and fatally crash, shutting down the entire server application.
Any remote user who is authorized to make a /v1/completions endpoint can trivially make such a request and induce a crash.
References
- github.com/advisories/GHSA-33cg-gxv8-3p8g
- github.com/pypa/advisory-database/tree/main/vulns/vllm/PYSEC-2026-2303.yaml
- github.com/vllm-project/vllm/commit/470229c37efaf69c86e8bc97482b0b1ff7551c65
- github.com/vllm-project/vllm/pull/45252
- github.com/vllm-project/vllm/releases/tag/v0.24.0
- github.com/vllm-project/vllm/security/advisories/GHSA-33cg-gxv8-3p8g
- nvd.nist.gov/vuln/detail/CVE-2026-55514
Code Behaviors & Features
Detect and mitigate CVE-2026-55514 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →