CVE-2026-94627
vLLM through 0.29.0 GPU KV Cache Leak via Mooncake Transfer ID Collision
CVSS Score
7.5
EPSS Score
0.0%
EPSS Percentile
0th
vLLM Mooncake connector through 0.29.0 fails to properly manage GPU KV cache block ownership when concurrent child requests share a single transfer ID in prefill/decode disaggregated deployments. Attackers can trigger GPU memory exhaustion by submitting completion requests with multiple prompts, causing orphaned KV cache blocks to accumulate until process restart and eventually preventing legitimate requests from executing.
| CWE | CWE-401 |
| Vendor | vllm-project |
| Product | vllm |
| Published | Sep 21, 2026 |
Stay Ahead of the Next One
Get instant alerts for vllm-project vllm
Be the first to know when new high vulnerabilities affecting vllm-project vllm are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Affected Versions
vllm-project / vllm
0 ≤ 0.29.0
References
github.com: https://github.com/vllm-project/vllm/pull/49796 github.com: https://github.com/vllm-project/vllm/blob/v0.29.0/vllm/distributed/kv_transfer/kv_connector/v1/mooncake/mooncake_connector.py#L1978-L1989 github.com: https://github.com/vllm-project/vllm vulncheck.com: https://www.vulncheck.com/advisories/vllm-through-0.29.0-gpu-kv-cache-leak-via-mooncake-transfer-id-collision
Credits
Mingkai Yu Jiapeng Li Jiajia Liu