A flaw in vllm-project vllm version 0.19.0 allows an attacker to manipulate the OpenAI‑compatible serving path, causing the service to become unresponsive. The flaw is a classic resource‑availability weakness (CWE‑404) that can be triggered remotely and the exploit is publicly available, meaning that any machine exposing the vulnerable endpoint is at risk of downtime.

The vulnerability affects the vllm component of vllm‑project, specifically version 0.19.0. Any deployment of that release exposed to outside traffic is potentially impacted.

The CVSS score of 6.9 places the flaw in the moderate range, but the absence of any protective controls and the public nature of the exploit raise the practical risk. EPSS information is not available, and the vulnerability is not listed in CISA’s KEV catalog, yet the remote attack vector and documented exploit code suggest that operators should treat it as a serious threat until a fix is available.