Medium severity · published Sep 15, 2026
CVE-2026-90878
vllm-project vLLM Jinja Template Rendering completions resource consumption
4.3
CVSS
0.5%
EPSS
No
On KEV
Description
A vulnerability was determined in vllm-project vLLM up to 0.27.1. This affects an unknown part of the file /v1/chat/completions of the component Jinja Template Rendering. This manipulation of the argument chat_template causes resource consumption. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The pull request to fix this issue awaits acceptance.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
None
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 45% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VL
vLLM · vllm-project
0.27.0; 0.27.1 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-90878
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-90878
github.com
https://github.com/vllm-project/vllm/
github.com
https://github.com/vllm-project/vllm/issues/52025
github.com
https://github.com/vllm-project/vllm/pull/52163
vuldb.com
https://vuldb.com/cve/CVE-2026-90878
vuldb.com
https://vuldb.com/submit/927901
vuldb.com
https://vuldb.com/vuln/403472
More from vLLM
9.8
CVE-2026-115915
vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCE
9.8
CVE-2026-25960
SSRF Protection Bypass in vLLM
9.8
CVE-2026-22778
vLLM leaks a heap address when PIL throws an error
9.8
CVE-2026-22807
vLLM affected by RCE via auto_map dynamic module loading during model initialization
9.8
CVE-2024-9053
vllm-project vllm version 0.6.0 contains a vulnerability in the AsyncEngineRPCServer() RPC server entrypoints