CVE-2026-93989

vLLM through 0.29.0 fails to properly validate bad_words token indices against the model's generation output width in SamplingParams.update_from_tokenizer(). Attackers can supply out-of-bounds token indices that corrupt logits memory of concurrent requests, causing different in-flight HTTP requests to return incorrect tokens.

• CWE-129

• https://github.com/vllm-project/vllmProduct
• https://github.com/vllm-project/vllm/blob/98dff2a81d747d1dba01a47f939f48c3526d4206/vllm/sampling_params.py#L694-L753Product
• https://github.com/vllm-project/vllm/blob/98dff2a81d747d1dba01a47f939f48c3526d4206/vllm/v1/worker/gpu/sample/bad_words.pyProduct
• https://github.com/vllm-project/vllm/pull/48824Issue Tracking, Patch
• https://www.vulncheck.com/advisories/vllm-through-0.29.0-cross-request-logits-corruption-via-bad-wordsThird Party Advisory

Published

Sep 19, 2026

Last Modified

Sep 28, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-93983OpenPanel through 2.3.0 fails to escape property keys in Cli…5
• CVE-2026-93984OpenPanel tracking API through 2.3.0 fails to verify client …5.3
• CVE-2026-93985OpenPanel js-runtime through 2.3.0 contains a sandbox escape…9.9
• CVE-2026-93986rclone before 1.75.1 fails to confine names from server and …3.1
• CVE-2026-93987rclone versions 1.56.0 through 1.75.0 contain a path travers…3.4
• CVE-2026-93988QloApps through 1.7.0 contains a path traversal vulnerabilit…6.5
• CVE-2026-9399A vulnerability was detected in Edimax BR-6675nD 1.12. This …8.8
• CVE-2026-93990Expat before 2.8.5 fails to validate that a high surrogate i…7.5
• CVE-2026-93991Argo Workflows versions 4.1.0 through 4.1.3 contain an autho…7.7
• CVE-2026-93992Gopeed through 2.0.0-beta.3 contains a path traversal vulner…8.1
• CVE-2026-93993Mistral Vibe before 2.25.5 contains a remote code execution …8.8
• CVE-2026-93994Apache MINA SSHD is a Java library for client-side and serve…8.1