CWE-131

vLLM Multimodal Special Token Injection Triggers Remote Engine Crash and Service Denial CVE-2026-44222

High-severity flaw CVE-2026-44222 in vLLM allows remote unauthenticated users to crash distributed GPU inference clusters via crafted multimodal tokens.