CVE-2026-92365
Last modified
CVE-2026-92365 is a medium-severity vulnerability rated 4.3/10 on the CVSS scale. A vulnerability was found in vllm-project vllm up to 0.29.0. Affected by this issue is some unknown functionality of the file vllm/v1/sample/thinking_budget_state.py.
Description
A vulnerability was found in vllm-project vllm up to 0.29.0. Affected by this issue is some unknown functionality of the file vllm/v1/sample/thinking_budget_state.py. The manipulation results in inefficient algorithmic complexity. It is possible to launch the attack remotely. The pull request to fix this issue awaits acceptance.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| vllm-project | vllm | 0.1; 0.2; 0.3; 0.4; 0.5; 0.6; 0.7; 0.8; 0.9; 0.10; 0.11; 0.12; 0.13; 0.14; 0.15; 0.16; 0.17; 0.18; 0.19; 0.20; 0.21; 0.22; 0.23; 0.24; 0.25; 0.26; 0.27; 0.28; 0.29.0 |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-92365?
How severe is CVE-2026-92365?
How do I fix CVE-2026-92365?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-9236The CM Ad Changer – A simple tool to control and optimize yo…4.3
- CVE-2026-92360A weakness has been identified in ag-ui-protocol ag-ui 1.0. …6.3
- CVE-2026-92361A security vulnerability has been detected in ag-ui-protocol…4.3
- CVE-2026-92362A vulnerability was detected in ag-ui-protocol ag-ui 1.0. Th…7.3
- CVE-2026-92363A flaw has been found in ag-ui-protocol ag-ui 1.0. Affected …4.3
- CVE-2026-92364A vulnerability has been found in itsourcecode Leave Managem…6.3
- CVE-2026-92366A vulnerability was determined in code-projects Matrimonial …7.3
- CVE-2026-9237The Employee, Leave and Recruitment Management System – Crew…4.3
- CVE-2026-92380A flaw has been found in WuzhiCMS up to 4.1.0. The impacted …7.3
- CVE-2026-92381A weakness has been identified in PbootCMS up to 3.2.22. Thi…3.5
- CVE-2026-92383A security vulnerability has been detected in PbootCMS up to…4.3
- CVE-2026-92385A vulnerability has been found in SourceCodester Online Food…2.4
Are you affected by CVE-2026-92365?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST