{"id":"CVE-2026-126398","summary":"vLLM 0.28.0 before 0.30.0 Denial of Service via Prompt Embeds on XD-RoPE Models","details":"vLLM from 0.28.0 before 0.30.0 contains a reachable assertion vulnerability in GPUModelRunner._init_xdrope_positions that allows remote attackers to crash the engine by submitting embeddings-only requests. Attackers can send a /v1/completions request containing only prompt_embeds to XD-RoPE models with --enable-prompt-embeds, terminating the EngineCore and API server for all clients.","aliases":["GHSA-5q78-j82c-2vr2"],"modified":"2026-11-14T02:45:16.777560619Z","published":"2026-11-13T09:35:49.601Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/126xxx/CVE-2026-126398.json","cna_assigner":"VulnCheck","cwe_ids":["CWE-617"]},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/126xxx/CVE-2026-126398.json"},{"type":"ADVISORY","url":"https://github.com/vllm-project/vllm/security/advisories/GHSA-5q78-j82c-2vr2"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-126398"},{"type":"ADVISORY","url":"https://www.vulncheck.com/advisories/vllm-0.28.0-before-0.30.0-denial-of-service-via-prompt-embeds-on-xd-rope-models"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/vllm-project/vllm","events":[{"introduced":"2cf0a6915ce544dc493a0990f2ea38d81601128a"},{"fixed":"ced6857afa0ea7b2e3f0846a62e1394e90f15607"}],"database_specific":{"extracted_events":[{"strategy":"StandardRange","range":[{"introduced":"0.28.0"},{"fixed":"0.30.0"}],"source":"AFFECTED_FIELD"}]}}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-126398.json"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}]}