—

PYSEC-2026-3997

Quick fix

PYSEC-2026-3997 — vllm: upgrade to the fixed version with the command below.

pip install --upgrade 'vllm>=0.28.0'

Details

vLLM versions before 0.28.0 fail to validate the lower bound of token IDs in the /v1/embeddings and /pooling endpoints, allowing unauthenticated attackers to crash the engine by submitting negative token IDs. A single request with a negative token ID triggers a CUDA device-side assertion that poisons the GPU context, causing all subsequent requests to fail until the process restarts.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/vllm

Introduced in: 0Fixed in: 0.28.0

Fixpip install --upgrade 'vllm>=0.28.0'

References

https://www.vulncheck.com/advisories/vllm-before-0.28.0-denial-of-service-via-negative-token-id[ADVISORY]
https://github.com/vllm-project/vllm/security/advisories/GHSA-25q3-v2hm-8vpf[FIX]