CVE-2026-22773
Last modified
CVE-2026-22773 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. vLLM is an inference and serving engine for large language models (LLMs). In versions from 0.6.4 to before 0.12.0, users can crash the vLLM engine serving multimodal models that use the Idefics3 vision model implementation by sending a specially crafted 1x1 pixel image. EPSS estimates a 0.40% chance of exploitation in the next 30 days.
Description
vLLM is an inference and serving engine for large language models (LLMs). In versions from 0.6.4 to before 0.12.0, users can crash the vLLM engine serving multimodal models that use the Idefics3 vision model implementation by sending a specially crafted 1x1 pixel image. This causes a tensor dimension mismatch that results in an unhandled runtime error, leading to complete server termination. This issue has been patched in version 0.12.0.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Vllm | Vllm | >= 0.6.4, < 0.12.0 |
References
- https://github.com/vllm-project/vllm/security/advisories/GHSA-grg2-63fw-f2qrExploit, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2026-22773?
How severe is CVE-2026-22773?
How do I fix CVE-2026-22773?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-22768Dell AppSync, version(s) 4.6.0, contain(s) an Incorrect Perm…7.3
- CVE-2026-22769Dell RecoverPoint for Virtual Machines, versions prior to 6.…10
- CVE-2026-2277The rexCrawler plugin for WordPress is vulnerable to Reflect…6.1
- CVE-2026-22770ImageMagick is free and open-source software used for editin…9.8
- CVE-2026-22771Envoy Gateway is an open source project for managing Envoy P…8.8
- CVE-2026-22772Fulcio is a certificate authority for issuing code signing c…5.3
- CVE-2026-22774Svelte devalue is a JavaScript library that serializes value…7.5
- CVE-2026-22775Svelte devalue is a JavaScript library that serializes value…7.5
- CVE-2026-22776cpp-httplib is a C++11 single-file header-only cross platfor…7.5
- CVE-2026-22777ComfyUI-Manager is an extension designed to enhance the usab…7.5
- CVE-2026-22778vLLM is an inference and serving engine for large language m…9.8
- CVE-2026-22779BlackSheep is an asynchronous web framework to build event b…5.3
Are you affected by CVE-2026-22773?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST