CVE-2026-73558

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-73558", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-08-12T20:53:46.380Z", "datePublished": "2026-08-13T15:06:06.584Z", "dateUpdated": "2026-08-13T15:38:40.181Z"}, "containers": {"cna": {"title": "vLLM: Cross-User Data Leak Vulnerability", "problemTypes": [{"descriptions": [{"cweId": "CWE-190", "lang": "en", "description": "CWE-190: Integer Overflow or Wraparound", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/vllm-project/vllm/security/advisories/GHSA-7m6h-x95x-82q5", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-7m6h-x95x-82q5"}, {"name": "https://github.com/vllm-project/vllm/issues/42860", "tags": ["x_refsource_MISC"], "url": "https://github.com/vllm-project/vllm/issues/42860"}, {"name": "https://github.com/vllm-project/vllm/pull/49660", "tags": ["x_refsource_MISC"], "url": "https://github.com/vllm-project/vllm/pull/49660"}, {"name": "https://github.com/vllm-project/vllm/commit/451227cb3ff07989698fed982c2d3e4300257924", "tags": ["x_refsource_MISC"], "url": "https://github.com/vllm-project/vllm/commit/451227cb3ff07989698fed982c2d3e4300257924"}, {"name": "https://github.com/vllm-project/vllm/releases/tag/v0.27.0", "tags": ["x_refsource_MISC"], "url": "https://github.com/vllm-project/vllm/releases/tag/v0.27.0"}], "affected": [{"vendor": "vllm-project", "product": "vllm", "versions": [{"version": "< 0.27.0", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-08-13T15:06:06.584Z"}, "descriptions": [{"lang": "en", "value": "vLLM is an inference and serving engine for large language models. Prior to 0.27.0, an integer overflow in blockIdx.x * 2 * d in activation_kernels.cu can cause act_and_mul_kernel to consume another batched user's input, allowing a request processed in the same inference batch to receive a partial or complete copy of another user's inference result. This issue is fixed in version 0.27.0."}], "source": {"advisory": "GHSA-7m6h-x95x-82q5", "discovery": "UNKNOWN"}}, "adp": [{"references": [{"url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-7m6h-x95x-82q5", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-08-13T15:38:18.767062Z", "id": "CVE-2026-73558", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-13T15:38:40.181Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-73558", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-13T15:38:18.767062Z"}}}], "references": [{"url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-7m6h-x95x-82q5", "tags": ["exploit"]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-13T15:38:33.352Z"}}], "cna": {"title": "vLLM: Cross-User Data Leak Vulnerability", "source": {"advisory": "GHSA-7m6h-x95x-82q5", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "vllm-project", "product": "vllm", "versions": [{"status": "affected", "version": "< 0.27.0"}]}], "references": [{"url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-7m6h-x95x-82q5", "name": "https://github.com/vllm-project/vllm/security/advisories/GHSA-7m6h-x95x-82q5", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/vllm-project/vllm/issues/42860", "name": "https://github.com/vllm-project/vllm/issues/42860", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/vllm-project/vllm/pull/49660", "name": "https://github.com/vllm-project/vllm/pull/49660", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/vllm-project/vllm/commit/451227cb3ff07989698fed982c2d3e4300257924", "name": "https://github.com/vllm-project/vllm/commit/451227cb3ff07989698fed982c2d3e4300257924", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/vllm-project/vllm/releases/tag/v0.27.0", "name": "https://github.com/vllm-project/vllm/releases/tag/v0.27.0", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "vLLM is an inference and serving engine for large language models. Prior to 0.27.0, an integer overflow in blockIdx.x * 2 * d in activation_kernels.cu can cause act_and_mul_kernel to consume another batched user's input, allowing a request processed in the same inference batch to receive a partial or complete copy of another user's inference result. This issue is fixed in version 0.27.0."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-190", "description": "CWE-190: Integer Overflow or Wraparound"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-08-13T15:06:06.584Z"}}}, "cveMetadata": {"cveId": "CVE-2026-73558", "state": "PUBLISHED", "dateUpdated": "2026-08-13T15:38:40.181Z", "dateReserved": "2026-08-12T20:53:46.380Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-08-13T15:06:06.584Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "vllm", "vendor": "vllm-project", "versions": [{"status": "affected", "version": "< 0.27.0"}]}], "source": "security-advisories@github.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:vllm:vllm:*:*:*:*:*:*:*:*", "matchCriteriaId": "DCC9D12D-2023-4198-AAA2-7F07FC7D669B", "versionEndExcluding": "0.27.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "vLLM is an inference and serving engine for large language models. Prior to 0.27.0, an integer overflow in blockIdx.x * 2 * d in activation_kernels.cu can cause act_and_mul_kernel to consume another batched user's input, allowing a request processed in the same inference batch to receive a partial or complete copy of another user's inference result. This issue is fixed in version 0.27.0."}], "id": "CVE-2026-73558", "lastModified": "2026-09-28T18:41:49.083", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 1.6, "impactScore": 3.6, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-73558", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-08-13T15:38:18.767062Z", "version": "2.0.3"}}]}, "published": "2026-08-13T15:20:18.220", "references": [{"source": "security-advisories@github.com", "tags": ["Patch"], "url": "https://github.com/vllm-project/vllm/commit/451227cb3ff07989698fed982c2d3e4300257924"}, {"source": "security-advisories@github.com", "tags": ["Issue Tracking", "Patch"], "url": "https://github.com/vllm-project/vllm/issues/42860"}, {"source": "security-advisories@github.com", "tags": ["Issue Tracking", "Patch"], "url": "https://github.com/vllm-project/vllm/pull/49660"}, {"source": "security-advisories@github.com", "tags": ["Release Notes"], "url": "https://github.com/vllm-project/vllm/releases/tag/v0.27.0"}, {"source": "security-advisories@github.com", "tags": ["Exploit", "Vendor Advisory"], "url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-7m6h-x95x-82q5"}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "tags": ["Exploit", "Vendor Advisory"], "url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-7m6h-x95x-82q5"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-190"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{"bugzilla": {"description": "vllm: vLLM: Cross-User Data Leakage via Integer Overflow", "id": "2515383", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515383"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.3", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N", "status": "draft"}, "cwe": "CWE-190", "details": ["vLLM is an inference and serving engine for large language models. Prior to 0.27.0, an integer overflow in blockIdx.x * 2 * d in activation_kernels.cu can cause act_and_mul_kernel to consume another batched user's input, allowing a request processed in the same inference batch to receive a partial or complete copy of another user's inference result. This issue is fixed in version 0.27.0.", "A flaw was found in vLLM, an inference and serving engine for large language models. An integer overflow vulnerability in the `act_and_mul_kernel` kernel allows a remote attacker to cause cross-user data leakage. By crafting specific requests processed in the same inference batch, an attacker can obtain a partial or complete copy of another user's inference result. This could lead to the unauthorized disclosure of sensitive information."], "name": "CVE-2026-73558", "public_date": "2026-08-13T15:06:06Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-73558\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-73558\nhttps://github.com/vllm-project/vllm/commit/451227cb3ff07989698fed982c2d3e4300257924\nhttps://github.com/vllm-project/vllm/issues/42860\nhttps://github.com/vllm-project/vllm/pull/49660\nhttps://github.com/vllm-project/vllm/releases/tag/v0.27.0\nhttps://github.com/vllm-project/vllm/security/advisories/GHSA-7m6h-x95x-82q5"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,0.27.0)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "vllm", "source": "cna", "vendor": "vllm-project"}, "product": "vllm", "vendor": "vllm-project"}], "created": "2026-08-13T17:15:05.157464+00:00", "updated": "2026-08-13T18:15:04.532431+00:00", "vendors": ["vllm-project", "vllm-project$PRODUCT$vllm"]}