CVE-2026-92365 in vllm

Resumen

por MITRE • 2026-09-16

A vulnerability was found in vllm-project vllm up to 0.29.0. Affected by this issue is some unknown functionality of the file vllm/v1/sample/thinking_budget_state.py. The manipulation results in inefficient algorithmic complexity. It is possible to launch the attack remotely. The pull request to fix this issue awaits acceptance.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Responsable: VulDB
• Divulgación: 2026-09-16
• Moderación: aceptado
• Artículo: VDB-405451
• CPE: listo
• CWE: CWE-407 (confirmado)
• CVSS: 4.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Actividades: bajo
• Sector: Police, Telecommunication, ...

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-92365
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-92365
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-92365/