CVE-2026-73558
vLLM: Cross-User Data Leak Vulnerability
CVSS Score
5.3
EPSS Score
0.0%
EPSS Percentile
0th
vLLM is an inference and serving engine for large language models. Prior to 0.27.0, an integer overflow in blockIdx.x * 2 * d in activation_kernels.cu can cause act_and_mul_kernel to consume another batched user's input, allowing a request processed in the same inference batch to receive a partial or complete copy of another user's inference result. This issue is fixed in version 0.27.0.
| CWE | CWE-190 |
| Vendor | vllm-project |
| Product | vllm |
| Published | Aug 13, 2026 |
| Last Updated | Aug 13, 2026 |
Stay Ahead of the Next One
Get instant alerts for vllm-project vllm
Be the first to know when new medium vulnerabilities affecting vllm-project vllm are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None
Affected Versions
vllm-project / vllm
< 0.27.0
References
github.com: https://github.com/vllm-project/vllm/security/advisories/GHSA-7m6h-x95x-82q5 github.com: https://github.com/vllm-project/vllm/issues/42860 github.com: https://github.com/vllm-project/vllm/pull/49660 github.com: https://github.com/vllm-project/vllm/commit/451227cb3ff07989698fed982c2d3e4300257924 github.com: https://github.com/vllm-project/vllm/releases/tag/v0.27.0