CVE-2026-116180: Critical Denial of Service Vulnerability in vLLM
A critical denial of service (DoS) vulnerability, CVE-2026-116180, has been discovered in vLLM, a popular AI model serving platform. The vulnerability affects versions from 0.8.5 to before 0.31.0 and allows an attacker to crash the EngineCore, impacting co-tenant requests. The CVSS score is 7.7, indicating a high severity. Immediate patching is recommended.