SOURCE-LINKED INTELLIGENCE
GHSA-87x5-vmc3-756j: vLLM: Completion prompt lists fan out into unbounded engine requests
## Summary The `/v1/completions` request model accepts `prompt` as a list of text prompts or a list of token-id prompts without any outer prompt-count bound. The serving path turns each element into a separate engine input, creates one engine generator per element, merges all generators, and allocates a response slot per prompt. An authenticated API client can therefore turn one request into an attacker-chosen number of backend subrequests before any aggregate request-count budget is enforced. ## Technical Details `CompletionRequest.prompt` allows both list-shaped prompt inputs and scalar prom
Read original source ↗ Open in workspace
- recordType
- vulnerability
- status
- active
- evidenceStatus
- reported
- region
- Global
Evidence & attribution
- OSV AI package advisories · 2026-08-13T18:40:06.000Z
- OSV AI package advisories · 2026-08-19T11:56:26.509Z
First collected: 2026-09-20T22:31:48.298Z. This is not the publication date.