{
 "id": "AIR-2026-0157",
 "slug": "cve-2026-94622-vllm-denial-of-service-in-nixl-connector-meta",
 "title": "CVE-2026-94622: vLLM Denial of Service in NIXL Connector Metadata Handling",
 "summary": "A denial of service vulnerability in vLLM allows attackers to crash the decode engine via incomplete metadata parameters. The flaw causes uncaught exceptions in EngineCore scheduling and failure of routed requests.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "vLLM"
 ],
 "incident_date": "2026-09-21",
 "incident_date_precision": "day",
 "first_reported": "2026-09-21",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-94622",
   "publisher": "NVD",
   "title": "CVE-2026-94622: vLLM versions through 0.29.0 contain a denial of service vulnerability in the NIXL connector's metadata handling for…",
   "published_at": "2026-09-21"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_nvd",
 "tags": [
  "CVE-2026-94622",
  "denial-of-service",
  "vllm"
 ],
 "created_at": "2026-10-18T06:33:31.967Z",
 "updated_at": "2026-10-18T06:33:31.967Z"
}