CVE-2026-92220 vllm-project vLLM MoRIIO Acknowledgement moriio_connector.py MoRIIOWrapper._handle_release_message resource consumption
Remote attackers can cause resource consumption in vLLM by manipulating request parameters in the MoRIIO connector, leading to denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-92220?
CVE-2026-92220 is a medium-severity denial of service vulnerability in vllm-project vLLM, published on 16 Sep 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability was found in vllm-project vLLM 0.26.0/0.27.0. Affected is the function MoRIIOConnectorScheduler.request_finished/MoRIIOConnectorWorker.get_finished/MoRIIOWrapper._handle_release_message of the file vllm/distributed/kv_transfer/kv_connector/v1/moriio/moriio_connector.py of the component MoRIIO Acknowledgement Handler. Performing a manipulation of the argument request_id/kv_transfer_params results in resource consumption. It is possible to initiate the attack remotely. The project was informed of the problem early through a pull request but has not reacted yet.
Which versions are affected by CVE-2026-92220?
How do I fix CVE-2026-92220?
No fix has been published for CVE-2026-92220 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2026-92220 being exploited?
There is no known exploitation of CVE-2026-92220 in the wild and no public exploit code.
Sources
Also known as GHSA-72xc-v4m3-9r7g.