2.3
Faible
CVE-2026-93989 vLLM through 0.29.0 fails to properly validate bad_words token indices against the model's generation output width in…
Description
vLLM through 0.29.0 fails to properly validate bad_words token indices against the model's generation output width in SamplingParams.update_from_tokenizer(). Attackers can supply out-of-bounds token indices that corrupt logits memory of concurrent requests, causing different in-flight HTTP requests to return incorrect tokens.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| vllm 0.29 | premières → 0.29.0 | Pas de correctif indiqué |
Références
- GitHub PR #48824 github.com
- _bad_words_kernel at v0.29.0 github.com
- update_from_tokenizer at v0.29.0 github.com
- github.com github.com
- VulnCheck Advisory: vLLM through 0.29.0 Cross-Request Logits Corruption via bad_words www.vulncheck.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de vllm
Les 121 CVE de vllm →
CVE-2026-115918
vLLM is an inference and serving engine for large language models
6.5
Moyenne
CVE-2026-115917
vLLM is an inference and serving engine for large language models
3.4
Faible
CVE-2026-115916
vLLM is an inference and serving engine for large language models
6.5
Moyenne
CVE-2026-115915
vLLM is an inference and serving engine for large language models
8.1
Élevée