CVE-2026-115914GHSA-gq5q-89c7-vhvx
vLLM DeepSeek-OCR image processing vulnerable to denial of service
vllm-project vllm
CVSS
6.5MediumExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
What fixes it
No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.
Description
vLLM is an inference and serving engine for large language models. From 0.11.1 until 0.32.0, the DeepSeek-OCR, DeepSeek-OCR-2, and Unlimited-OCR image path allows a remote client that can reach the OpenAI-compatible API to submit a legal image whose normalized pixels sum to zero when that image is alone in its per-step encoder batch. _parse_and_validate_image_input returns no embedding, embed_multimodal propagates that value, and sanity_check_mm_encoder_outputs triggers a fatal assertion that shuts down the engine for all users. This issue is fixed in version 0.32.0.
Text from CVE List
Affected versions 1
- vllmaffected: >= 0.11.1, < 0.32.0CVE List
References 4
- github.com/vllm-project/vllm/commit/c15672cfb49152ebf65cfd188e71b84593ec5686Fixvia CVE List
- github.com/vllm-project/vllm/releases/tag/v0.32.0Fixvia CVE List
- github.com/vllm-project/vllm/security/advisories/GHSA-gq5q-89c7-vhvxAdvisoryvia CVE List
- github.com/vllm-project/vllm/pull/59417Referencevia CVE List