vLLM: Mirrored multimodal IPC caches desync after a rejected request — a later request reusing the same media hash trips a receiver assertion in the engine core · CVE-2026-105753 · GitHub Advisory Database

vLLM: Mirrored multimodal IPC caches desync after a rejected request — a later request reusing the same media hash trips a receiver assertion in the engine core

Moderate severity GitHub Reviewed Published Sep 28, 2026 in vllm-project/vllm • Updated Oct 6, 2026

Give feedback on Dependabot alerts