CVE-2026-7141

A vulnerability was found in vLLM up to 0.19.0. The affected element is the function has_mamba_layers of the file vllm/v1/kv_cache_interface.py of the component KV Block Handler. Performing a manipulation results in uninitialized resource. It is possible to initiate the attack remotely. The attack is considered to have high complexity. The exploitability is described as difficult. The exploit has been made public and could be used. The existence of this vulnerability is still disputed at present. The proposed patch did not fix the issue. A 3rd party explains: "The divergence could be explained by a benign and expected vLLM behavior where vLLM server could group concurrent requests together resulting in different input shapes based on varying request arrival time. The differences in grouped input shapes could call different kernels with could produce difference results due to rounding and differences in order of operations. There is an environment variable VLLM_BATCH_INVARIANT=1 for users that desire to have deterministic output with temperature 0.0."

• CWE-908

• https://github.com/vllm-project/vllm/issues/39146Issue Tracking
• https://github.com/vllm-project/vllm/issues/39146#issue-4215090365Issue Tracking
• https://vuldb.com/cve/CVE-2026-7141
• https://vuldb.com/submit/801297Third Party Advisory, VDB Entry
• https://vuldb.com/vuln/359740Third Party Advisory, VDB Entry
• https://vuldb.com/vuln/359740/ctiPermissions Required

Published

Apr 27, 2026

Last Modified

Aug 25, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-71401An integer underflow was found in the DHCPv4 packet capture …5.3
• CVE-2026-71402An out-of-bounds read was found in the DHCPv4 packet capture…5.4
• CVE-2026-71403A flaw was found in Rancher Manager. The /v3/users update pa…6.1
• CVE-2026-71404A flaw was found in Rancher Manager. The GlobalRole controll…8.7
• CVE-2026-71407A Stack-based Buffer Overflow vulnerability [CWE-121] vulner…8.1
• CVE-2026-71408A allocation of resources without limits or throttling vulne…5.3
• CVE-2026-71415Kirby is an open-source content management system. From 5.0.…7.1
• CVE-2026-71416Headroom compresses data before the data reaches a large lan…8.8
• CVE-2026-71417Lemur manages TLS certificate creation. Prior to 1.9.3, POST…7.3
• CVE-2026-71418Suricata is a network Intrusion Detection System, Intrusion …7.5
• CVE-2026-7142A vulnerability was determined in Wooey up to 0.13.2. The im…6.3
• CVE-2026-71424Onyx is an open-source AI platform. Prior to 3.1.10, 3.2.14,…9.6