CVE-2026-105922— vllm-project vLLM Penalty utils.py get_token_bin_counts_and_mask denial of service

Quick assessment

Copy summary Copy citation

Affected

vllm-project vLLM

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 vllm-project 的 vLLM 项目（版本不高于 0.31.0）中发现了安全漏洞。该漏洞影响组件“Penalty Handler”中的文件 vllm/model_executor/layers/utils.py 中的 get_token_bin_counts_and_mask 函数。执行攻击操作可导致拒绝服务（Denial of Service, DoS）。该漏洞可能被远程利用，且相关攻击代码已公开，可能被攻击者用于实施攻击。项目方已通过问题报告（issue report）提前获知此漏洞，但至今尚未回应

CVE-2026-105922 affects vllm-project vLLM. No confirmed in-the-wild exploitation; assess based on exposure. 在 vllm-project 的 vLLM 项目（版本不高于 0.31.0）中发现了安全漏洞。该漏洞影响组件“Penalty Handler”中的文件 vllm/model_executor/layers/utils.py 中的 get_token_bin_counts_and_mask 函数。执行攻击操作可导致拒绝服务（Denial of Service, CVE-2026-105922 vulnerability details, Shenlong CVE Platform, https://cve.imfht.com/detail/CVE-2026-105922

I. Basic Information for CVE-2026-105922

Affected Products

II. Public POCs for CVE-2026-105922

III. Intelligence Information for CVE-2026-105922

Vendor Pages for CVE-2026-105922 (1)

• 🔗 GitHub - vllm-project/vllm: A high-throughput and memory-efficient inference and serving engine for LLMs · GitHub product

Other References for CVE-2026-105922 (5)

• https://github.com/vllm-project/vllm/issues/57719 issue-tracking
• https://gist.github.com/Yunzez/5c70a3bb328eaf6d646b9d31e879dc4a#file-repro_prompt_embeds_penalties_engine_crash-py exploit
• https://vuldb.com/cve/CVE-2026-105922 third-party-advisory
• https://vuldb.com/vuln/413896/cti signature permissions-required
• https://vuldb.com/submit/992707 third-party-advisory

• https://www.cve.org/CVERecord?id=CVE-2026-105922

IV. Related Vulnerabilities

V. Comments for CVE-2026-105922