CVE-2026-94623: Vllm

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

vLLM through 0.29.0 contains a denial of service vulnerability in the NIXL connector's prefix caching implementation that fails to properly validate block counts across multi-prompt completion requests in prefill/decode disaggregated deployments. Attackers can trigger an assertion failure in NixlBaseConnectorWorker._apply_prefix_caching by submitting completion requests with multiple prompts of varying lengths, causing the decode worker to terminate and become unavailable until restarted.

Affected products

• Vllm Vllm: up to and including 0.29.0

Published 2026-09-21. Last modified 2026-09-29.