CVE-2026-105755

Affects: large language model, vLLM

CVSS: MEDIUM · 4.2v3.1
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L
Published: 2026-10-05
Weakness: CWE-639
Source: nvd.nist.gov/vuln/detail/CVE-2026-105755

Description

vLLM is an inference and serving engine for large language models. Prior to 0.30.0, flash late-interaction scoring at the /score and /rerank endpoints derives each worker’s query_key value from the caller-controlled X-Request-Id header. A concurrent request that reuses a victim’s identifier can overwrite the cached query embedding so the victim’s documents are scored against the attacker’s query, and shared use counters can also cause a late-interaction cache-miss error. This issue is fixed in version 0.30.0.

References

How GTK Cyber trains on this

AI security training at GTK Cyber covers the LLM and ML-pipeline vulnerability classes that vulnerabilities like CVE-2026-105755 fall into. Our hands-on courses are taught by Charles Givre and other practitioners who break and defend production AI systems.

AI Red-Teaming course →·Browse MITRE ATLAS techniques

Related AI/LLM CVEs

AI security training, taught by people who do the work.

Hands-on courses on adversarial AI, prompt injection, and ML pipeline security.

Explore AI Red-Teaming