CVE-2026-94624

7.5 HIGHpublic exploit available

Published 2026-09-21 · Updated 2026-09-21

AI risk analysis

Summary: The vulnerability allows attackers to create unreachable peer sessions that exhaust ZeroMQ socket quotas, leading to EngineCore crashes and service disruptions.
Exploitability: Exploitation requires configuring OffloadingConnector with TieringOffloadingSpec and supplying specific remote host and port values; the attack is moderately complex.
Blast radius: If exploited, this could result in widespread service outages affecting all inference processes relying on P2P KV offloading.
Prioritized remediation: Update to a patched version of vLLM or disable P2P KV offloading until a fix is available.

dosp2pkv-offloadingzeromq

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

vLLM through 0.29.0 contains a denial of service vulnerability in P2P KV offloading when OffloadingConnector is configured with TieringOffloadingSpec and a peer-to-peer secondary tier. Attackers can supply arbitrary remote host and port values in kv_transfer_params to create unreachable peer sessions that retain ZeroMQ sockets until the context quota is exhausted, causing an uncaught ZMQError that crashes EngineCore and stops all inference.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses

CWE-770

Public exploit & PoC references

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.