CVE-2026-44222 Details
Description
vLLM is an inference and serving engine for large language models (LLMs). From 0.6.1 to before 0.20.0, there is a a Token Injection vulnerability in vLLM’s multimodal processing. Unauthenticated, text-only prompts that spell special tokens are interpreted as control. Image and video placeholder sequences supplied without matching data cause vLLM to index into empty grids during input-position computation, raising an unhandled IndexError and terminating the worker or degrading availability. Multimodal paths that rely on image_grid_thw/video_grid_thw are affected. This vulnerability is fixed in 0.20.0.
A token injection vulnerability has been identified in vLLM, an inference and serving engine for large language models. This vulnerability exists in versions 0.6.1 prior to 0.20.0 and affects vLLM's multimodal processing. The issue arises when unauthenticated, text-only prompts include special tokens, which are then interpreted as control commands. Additionally, image and video placeholder sequences provided without corresponding data cause vLLM to access empty grids during input-position calculation. This oversight leads to an unhandled IndexError, causing the worker to terminate or degrade service availability. The vulnerability impacts multimodal paths that utilize 'image_grid_thw' or 'video_grid_thw'.
Users can update to vLLM version 0.20.0 or later, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed May 13, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/vllm-project/vllm/issues/32656 | [email protected] | Issue Tracking |
| https://github.com/vllm-project/vllm/security/advisories/GHSA-hpv8-x276-m59f | [email protected] | ExploitVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-129 | Improper Validation of Array Index | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| vllm vllm | >= 0.6.1, < 0.20.0 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| May 14, 2026 | Initial Analysis | [email protected] |
| May 12, 2026 | New CVE Received | [email protected] |