CVE-2026-93840

vLLM before 0.29.0 validates allowed_token_ids against tokenizer length instead of model output logits width in SamplingParams._validate_allowed_token_ids(). Attackers can supply token IDs above the output vocabulary that pass validation, causing LogitBiasState to corrupt GPU logits state and allow concurrent requests to sample tokens outside their allowlists.

• CWE-129

• https://github.com/vllm-project/vllmProduct
• https://github.com/vllm-project/vllm/blob/v0.28.0/vllm/sampling_params.py#L881-L903Product
• https://github.com/vllm-project/vllm/blob/v0.28.0/vllm/v1/worker/gpu/sample/logit_bias.py#L179-L191Product
• https://github.com/vllm-project/vllm/commit/5b0e5b69ac1a3884a6479c9537789c95263cc804Patch
• https://github.com/vllm-project/vllm/pull/49080Issue Tracking, Patch
• https://www.vulncheck.com/advisories/vllm-before-0.29.0-cross-request-logits-corruption-via-allowed-token-idsThird Party Advisory

Published

Sep 18, 2026

Last Modified

Sep 28, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-93832A component of one of the Motorola system applications was e…4.4
• CVE-2026-93834A use-after-free vulnerability was found in QEMU's 9pfs subs…8.8
• CVE-2026-93836The WPC Product Bundles for WooCommerce plugin for WordPress…7.2
• CVE-2026-93838SGLang versions through 0.5.20 contain an unbounded memory a…5.9
• CVE-2026-93839LightLLM through 1.2.0 contains an authentication bypass vul…9.8
• CVE-2026-9384A vulnerability was found in Totolink A8000RU 7.1cu.643_b202…9.8
• CVE-2026-93841vLLM through 0.29.0 contains a memory corruption vulnerabili…5.3
• CVE-2026-93846Mattermost versions 11.7.x <= 11.7.10 fail to restrict which…3.8
• CVE-2026-93847Mattermost versions 11.7.x <= 11.7.10 fail to validate reser…3.5
• CVE-2026-93848Mattermost versions 11.7.x <= 11.7.10 fail to apply outbound…2.7
• CVE-2026-93849Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7…6.5
• CVE-2026-9385A vulnerability was determined in Totolink A8000RU 7.1cu.643…9.8