CVE-2026-90713— vllm-project vLLM tiktoken vocab File mod.rs new denial of service
Quick assessment
Affected
vllm-project vLLM
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 vllm-project 的 vLLM 版本（截至 0.29.0）中发现了一个安全漏洞。受影响的组件是 词表文件处理器（tiktoken vocab File Handler）中，位于 文件里的 函数。攻击者通过操纵该函数可导致拒绝服务（DoS）。该漏洞仅在与系统具有本地访问权限时可被利用。利用该漏洞的攻击向量已经公开，可被用于发起攻击。目前，用于修复此问题的拉取请求（Pull Request）已提交，尚待审核接受。
Possible ATT&CK Techniques 2 AI
T1499 · Endpoint Denial of Service T1010 · Application Window Discovery
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-90713
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
vllm-project vLLM tiktoken vocab File mod.rs new denial of service
Source: CVE Program / CVE List V5
Vulnerability Description
A security flaw has been discovered in vllm-project vLLM up to 0.29.0. The affected element is the function TiktokenTokenizer::new of the file rust/src/text/src/backend/hf/mod.rs of the component tiktoken vocab File Handler. The manipulation results in denial of service. The attack is only possible with local access. The exploit has been released to the public and may be used for attacks. The pull request to fix this issue awaits acceptance.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
不恰当的资源关闭或释放
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| vllm-project | vLLM | 0.1 |
cpe:2.3:a:vllm-project:vllm:*:*:*:*:*:*:*:*
|
|
II. Public POCs for CVE-2026-90713
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-90713
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-90713 (1)
Proof of Concept for CVE-2026-90713 (1)
Vendor Pages for CVE-2026-90713 (1)
Other References for CVE-2026-90713 (1)
IV. Related Vulnerabilities
Same product: vLLM
-
CVE-2026-90555
vLLM before 0.28.0 Denial of Service via Audio Header -
CVE-2026-90554
vLLM before 0.28.0 Denial of Service via audio extraction -
CVE-2026-90553
vLLM before 0.28.0 Remote Code Execution via LlavaOnevision2 -
CVE-2026-78684
vLLM before 0.27.0 Denial of Service via DeepStream Backend -
CVE-2026-73560
vLLM: SSRF + arbitrary local file read in MiMoV2OmniMultiMod
Same vendor: vllm-project
-
CVE-2026-90554
vLLM before 0.28.0 Denial of Service via audio extraction -
CVE-2026-90555
vLLM before 0.28.0 Denial of Service via Audio Header -
CVE-2026-90553
vLLM before 0.28.0 Remote Code Execution via LlavaOnevision2 -
CVE-2026-78684
vLLM before 0.27.0 Denial of Service via DeepStream Backend -
CVE-2026-73560
vLLM: SSRF + arbitrary local file read in MiMoV2OmniMultiMod
Same weakness: CWE-404
-
CVE-2026-90712
Gitlawb openclaude xAI OAuth Callback xaiOAuthCallback.ts wa -
CVE-2026-85407
Eleveo Quality Management Conversation events denial of serv -
CVE-2026-84887
simular-ai Agent-S Model-generated GUI Action Execution Work -
CVE-2026-84885
simular-ai Agent-S CodeAgent code_agent.py denial of service -
CVE-2026-84856
rowboatlabs rowboat Composio Webhook Endpoint route.ts req.j
V. Comments for CVE-2026-90713
No comments yet