Low severity · published Sep 14, 2026
CVE-2026-90713
vllm-project vLLM tiktoken vocab File mod.rs new denial of service
3.3
CVSS
0.2%
EPSS
No
On KEV
Description
A security flaw has been discovered in vllm-project vLLM up to 0.29.0. The affected element is the function TiktokenTokenizer::new of the file rust/src/text/src/backend/hf/mod.rs of the component tiktoken vocab File Handler. The manipulation results in denial of service. The attack is only possible with local access. The exploit has been released to the public and may be used for attacks. The pull request to fix this issue awaits acceptance.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
None
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 5% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VL
vLLM · vllm-project
0.1; 0.2; 0.3; 0.4; 0.5; 0.6; +23 more · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-90713
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-90713
gist.github.com
https://gist.github.com/Yunzez/4b08ec3568a8cbfb120062e2558382b8
github.com
https://github.com/vllm-project/vllm/
github.com
https://github.com/vllm-project/vllm/issues/50954
github.com
https://github.com/vllm-project/vllm/pull/51135
vuldb.com
https://vuldb.com/cve/CVE-2026-90713
vuldb.com
https://vuldb.com/submit/918762
More from vLLM
9.8
CVE-2026-115915
vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCE
9.8
CVE-2026-25960
SSRF Protection Bypass in vLLM
9.8
CVE-2026-22778
vLLM leaks a heap address when PIL throws an error
9.8
CVE-2026-22807
vLLM affected by RCE via auto_map dynamic module loading during model initialization
9.8
CVE-2024-9053
vllm-project vllm version 0.6.0 contains a vulnerability in the AsyncEngineRPCServer() RPC server entrypoints