CVE-2026-44223

Summary

vLLM is an inference and serving engine for large language models (LLMs). From to before 0.20.0, the extract_hidden_states speculative decoding proposer in vLLM returns a tensor with an incorrect shape after the first decode step, causing a RuntimeError that crashes the EngineCore process. The cras

Severity

medium

EPSS

0.4% (p28)

Also known as

GHSA-83vm-p52w-f9pw, PYSEC-2026-145

Published

2026-05-12

References

• https://github.com/vllm-project/vllm/security/advisories/GHSA-83vm-p52w-f9pw
• https://github.com/vllm-project/vllm/pull/38610

Related advisories

• CVE-2026-48746 — critical · PyPI/vllm
• CVE-2026-22778 — critical · PyPI/vllm
• CVE-2025-47277 — critical · PyPI/vllm
• CVE-2025-32444 — critical · PyPI/vllm
• GHSA-ggpf-24jw-3fcw — critical · PyPI/vllm
• CVE-2024-9052 — critical · PyPI/vllm
• CVE-2024-9053 — critical · PyPI/vllm
• CVE-2024-11041 — critical · PyPI/vllm

Is your project exposed to this? Stateward checks every dependency on every pull request and flags it only if your code actually reaches it.

Summarize with AI

ChatGPTClaudePerplexity