Description (CNA)
A vulnerability was found in vllm-project vllm up to 0.29.0. Affected by this issue is some unknown functionality of the file vllm/v1/sample/thinking_budget_state.py. The manipulation results in inefficient algorithmic complexity. It is possible to launch the attack remotely. The pull request to fix this issue awaits acceptance.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| vllm-project / vllm | affected 0.1; affected 0.2; affected 0.3; affected 0.4; affected 0.5; affected 0.6; affected 0.7; affected 0.8; affected 0.9; affected 0.10; affected 0.11; affected 0.12; affected 0.13; affected 0.14; affected 0.15; affected 0.16; affected 0.17; affected 0.18; affected 0.19; affected 0.20; affected 0.21; affected 0.22; affected 0.23; affected 0.24; affected 0.25; affected 0.26; affected 0.27; affected 0.28; affected 0.29.0 |
CWE
CWE-407, CWE-404
References
- https://vuldb.com/vuln/405451
- https://vuldb.com/vuln/405451/cti
- https://vuldb.com/cve/CVE-2026-92365
- https://vuldb.com/submit/935016
- https://github.com/vllm-project/vllm/pull/51133
- https://github.com/vllm-project/vllm/
ADP enrichment
No English description supplied.
No references supplied.