CVE-2026-56340 - vLLM - Denial of Service via Unvalidated Multimodal Embeddings
CVE ID :CVE-2026-56340 Published : June 20, 2026, 6:27 p.m. | 42 minutes ago Description :vLLM versions >= 0.10.2 and < 0.13.0 are missing sparse tensor validation in multimodal embeddings processing. Because PyTorch disables sparse tensor invariant checks by default, an attacker can submit...