CVE-2026-93841

vLLM through 0.29.0 contains a memory corruption vulnerability in the Triton _bincount_kernel where prompt token IDs index the penalty prompt-presence bitset without bounds checking against vocabulary size. Attackers can submit multimodal audio requests with tokens equal to vocabulary size, causing out-of-bounds writes that corrupt concurrent requests' sampler state and alter repetition penalty behavior.

• CWE-129

• https://github.com/vllm-project/vllmProduct
• https://github.com/vllm-project/vllm/blob/v0.29.0/vllm/v1/worker/gpu/sample/penalties.py#L241-L255Product
• https://github.com/vllm-project/vllm/blob/v0.29.0/vllm/v1/worker/gpu/sample/penalties.py#L33-L37Product
• https://github.com/vllm-project/vllm/pull/49081Issue Tracking, Patch
• https://www.vulncheck.com/advisories/vllm-through-0.29.0-adjacent-request-sampler-state-corruption-via-unvalidated-prompt-token-idsThird Party Advisory

Published

Sep 18, 2026

Last Modified

Sep 28, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-93834A use-after-free vulnerability was found in QEMU's 9pfs subs…8.8
• CVE-2026-93836The WPC Product Bundles for WooCommerce plugin for WordPress…7.2
• CVE-2026-93838SGLang versions through 0.5.20 contain an unbounded memory a…5.9
• CVE-2026-93839LightLLM through 1.2.0 contains an authentication bypass vul…9.8
• CVE-2026-9384A vulnerability was found in Totolink A8000RU 7.1cu.643_b202…9.8
• CVE-2026-93840vLLM before 0.29.0 validates allowed_token_ids against token…5.3
• CVE-2026-93846Mattermost versions 11.7.x <= 11.7.10 fail to restrict which…3.8
• CVE-2026-93847Mattermost versions 11.7.x <= 11.7.10 fail to validate reser…3.5
• CVE-2026-93848Mattermost versions 11.7.x <= 11.7.10 fail to apply outbound…2.7
• CVE-2026-93849Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7…6.5
• CVE-2026-9385A vulnerability was determined in Totolink A8000RU 7.1cu.643…9.8
• CVE-2026-93850Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7…6.5