CVE-2026-90713: vllm-project vLLM tiktoken vocab File mod.rs new denial of service
A security flaw has been discovered in vllm-project vLLM up to 0.29.0. The affected element is the function TiktokenTokenizer::new of the file rust/src/text/src/backend/hf/mod.rs of the component tiktoken vocab File Handler. The manipulation results in denial of service. The attack is only possible with local access. The exploit has been released to the public and may be used for attacks. The pull request to fix this issue awaits acceptance.
Affected Software
Event History
Frequently Asked Questions
Who can realistically exploit this issue?
Exploitation requires local access and low privileges. Remote-only attackers are not indicated by the available data.
What is the practical impact?
The reported impact is denial of service through manipulation involving the tiktoken vocabulary file handler. No confidentiality or integrity impact is described.
Are public exploits available?
Yes. The exploit has been released publicly and may be used in attacks.
Is a fix available?
A pull request intended to fix the issue exists, but it is awaiting acceptance. The available data does not identify a released fixed version.