Tools AI Risk Radar ai-incident-0246
Incident record
Invalid token IDs could crash a vLLM GPU worker
- Severity
- Medium
- Status
- Patched
- Type
- Infra Vuln
- Target
- vllm-project/vllm
- Actor
- researcher
What happened
An out-of-vocabulary token ID could pass input validation and trigger a GPU assertion, stopping an affected serving engine.
The report identifies a single-GPU configuration and tokenisers such as Llama-2 whose vocabulary boundary fits the described condition. The maintainer lists versions through 0.30.0 as affected and 0.32.0 as patched.
Sources
- Maintainer security advisorygithub.com/vllm-project/vllm/security/advisories/GHSA-q97c-p…
One record from the AI Risk Radar, maintained by the Security Desk.Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 28 October 2026