{
 "id": "AIR-2026-1391",
 "slug": "vllm-moriio-acknowledgement-handler-resource-consumption-vul",
 "title": "vLLM MoRIIO Acknowledgement Handler Resource Consumption Vulnerability",
 "summary": "A resource consumption vulnerability exists in vLLM versions 0.26.0 and 0.27.0 within the MoRIIO acknowledgement handler. Remote attackers can manipulate request parameters to cause excessive resource consumption, though no exploitation is confirmed yet.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "vLLM"
 ],
 "incident_date": "2026-09-16",
 "incident_date_precision": "day",
 "first_reported": "2026-09-16",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-92220",
   "publisher": "NVD",
   "title": "CVE-2026-92220: A vulnerability was found in vllm-project vLLM 0.26.0/0.27.0.",
   "published_at": "2026-09-16"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_nvd",
 "tags": [
  "CVE-2026-92220",
  "vllm",
  "denial-of-service"
 ],
 "created_at": "2026-10-18T10:04:21.885Z",
 "updated_at": "2026-10-18T10:04:21.885Z"
}