Skip to content
VulniPulse
Sign in
Highest advisory severityHigh 1 vendor · 1 advisory

CVE-2026-94622

CVE-2026-94622: 1 tracked advisory record across Red Hat. Compare vendor sources and published fix guidance.

Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.

NVD detail CVE.org

Vendor advisory comparison

Red Hat

1 advisory
  • Advisory severityHigh7.5

    High [CVE-2026-94622] Denial of Service via Incomplete NIXL KV Transfer Metadata

    CVE-2026-94622Source published Source updated

    Denial of Service via Incomplete NIXL KV Transfer Metadata. Red Hat rates this important (CVSS 7.5). Weakness: CWE-248. Affected products named by the advisory: Red Hat AI Inference Server; Red Hat Enterprise Linux AI (RHEL AI) 3; Red Hat OpenShift AI (RHOAI).

    Related products — impact not confirmed
    • Red Hat AI Inference Server
    • Red Hat Enterprise Linux AI (RHEL AI) 3
    • Red Hat OpenShift AI (RHOAI)
    Source-reported affected versions
    • 0.29.0
    Source-reported fixed versions
    No fixed-version detail extracted. This does not mean no fix exists.
    Mitigation guidance
    • To reduce exposure to this vulnerability, apply the following operational controls: 1. Disable disaggregated KV transfer: Deploy vLLM instances in a standalone configuration or run unified prefill and decode workers rather than disaggregated roles utilizing the NIXL KV cache transfer connector. 2. Restrict network exposure: Apply OpenShift NetworkPolicies or firewall rules to limit access to vLLM inference ports, permitting traffic only from trusted API gateways or internal clients. Caveats: Disabling disaggregated prefill/decode operation prevents multi-node distributed cache sharing and may reduce inference performance for long-context requests. Network restrictions will prevent access from non-whitelisted IP addresses. Warning: Altering the deployment architecture requires restarting vLLM pods or containers, which will cause a temporary service disruption during workload restart.
    Full advisory and evidenceOpen source bulletin

Android app · Google Play

Monitor future Red Hat CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery
Get CVE alertsSee app features