CVE-2026-54234 — Security Box Score

CVE · referencelatest edition

Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2026-54234HIGH

vllm-project vllm — vLLM: Remote DoS in vLLM via Invalid Recovered Token Reinjection

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  N  N  H    7.5   .0036   29.5     —

AFFECTED
  Product  Versions    Fixed
  vllm     < 0.24.0 –  —

TIMELINE
  Jun 12  Reserved by GitHub_M
  Jul 6   EXPLOIT PUBLISHED — CVE-2026-54234 (vllm-project vllm). Public exploit reference added.
  Jul 6   Published (CNA: GitHub_M)

CWE-20, CWE-1284 · CNA: GitHub_M · CVSS v3.1 · 3 references · NVD status: Analyzed

Description

vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Prior to 0.24.0, a frontend-legal multi-request speculative decoding workload can cause the rejection sampler to produce a recovered token equal to the model vocabulary size boundary value, which is then converted to negative one when the engine selects the next live token for a request and is written back into the drafter's input ids; that out-of-vocabulary value is later consumed by the model's embedding and attention path and crashes the engine worker with a GPU device-side assertion. The same triggering request sequence is reachable through the public gRPC Generate and Abort endpoints, so a remote client that can send generation requests can crash the shared engine worker, aborting concurrent requests and causing a service-wide denial of service for other clients of the deployment until the worker is restarted. This issue is fixed in version 0.24.0.

Lifecycle

Complete event history — 3 events, chronological
Date	Event	Detail
June 12, 2026	Reserved	Reserved by GitHub_M
July 6, 2026	EXPLOIT PUBLISHED	EXPLOIT PUBLISHED — CVE-2026-54234 (vllm-project vllm). Public exploit reference added.
July 6, 2026	Published	Published (CNA: GitHub_M)

Affected

Affected products and packages — 1 row
Vendor	Product / Package	Ecosystem	Version introduced	Fixed
vllm-project	vllm	—	< 0.24.0	—

Weaknesses

CWE-20 · CWE-1284

References (3)

https://github.com/vllm-project/vllm/commit/8a5cf1ccd65e8ac7635c402c1ec0b08988bc26ca [Patch]
https://github.com/vllm-project/vllm/pull/44744 [Issue Tracking, Patch]
https://github.com/vllm-project/vllm/security/advisories/GHSA-8wr5-jm2h-8r4f [Vendor Advisory, Exploit]

Authoritative record: CVE-2026-54234 at cve.org

Vendors: vllm-project

Weaknesses: CWE-20 · CWE-1284

About this page

This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2026-54234 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.