{"vulnerability": "cve-2026-94625", "sightings": [{"uuid": "73fdbc83-f19a-40ef-9f3a-3edf2da838d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94625", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117353704221701161", "content": "CVE-2026-94625: vLLM through 0.29.0 DoS in MooncakeConnector. Rejected prefill requests leak ownerless placeholders, exhausting sender task pools. Valid requests delayed up to 480s while health checks still pass. CVSS 5.3, https://www.valtersit.com/cve/CVE-2026-94625/ #CVE #infosec #vLLM", "creation_timestamp": "2026-09-29T09:50:19.585260Z"}, {"uuid": "306a3df0-8006-43c4-9561-4a2894b065d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94625", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mwnkzlkdus27", "content": "CVE-2026-94625: vLLM through 0.29.0 DoS in MooncakeConnector. Rejected prefill requests leak ownerless placeholders, exhausting sender task pools. Valid requests delayed up to 480s while health checks still pass. CVSS 5.3, https://www.valtersit.com/cve/CVE-2026-94625/ #CVE #infosec #vLLM", "creation_timestamp": "2026-09-29T10:00:04.246048Z"}]}