{
 "id": "AIR-2026-0154",
 "slug": "vllm-nixl-connector-denial-of-service-vulnerability",
 "title": "vLLM NIXL connector denial of service vulnerability",
 "summary": "A denial of service vulnerability exists in the vLLM NIXL connector prefix caching implementation due to improper block count validation. Attackers can trigger an assertion failure that terminates the decode worker until restarted.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "vLLM"
 ],
 "incident_date": "2026-09-21",
 "incident_date_precision": "day",
 "first_reported": "2026-09-21",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-94623",
   "publisher": "NVD",
   "title": "CVE-2026-94623: vLLM through 0.29.0 contains a denial of service vulnerability in the NIXL connector's prefix caching implementation that fails…",
   "published_at": "2026-09-21"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_nvd",
 "tags": [
  "CVE-2026-94623",
  "vllm",
  "denial_of_service"
 ],
 "created_at": "2026-10-18T06:33:31.967Z",
 "updated_at": "2026-10-18T06:33:31.967Z"
}