CVE catalog
CVE-2026-93840
vLLM before 0.29.0 validates allowed_token_ids against tokenizer length instead of model output logits width in SamplingParams._validate_allowed_token_ids(). Attackers can supply token IDs above the o
- Severity
- Medium · CVSS 6.3
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 0.25% · Oct 25, 2026
A flaw was found in vLLM. This vulnerability arises from incorrect validation of `allowed_token_ids` against the tokenizer length instead of the model's output logits width. A remote attacker can exploit this by supplying token IDs that exceed the output vocabulary, which bypasses validation. This can lead to the corruption of the GPU logits state, potentially allowing concurrent requests to sample tokens outside their intended allowlists, resulting in information disclosure. vllm: vLLM: Information disclosure via incorrect token ID validation The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Cpe | vllm | Not reported | 0.29.0 | fixed |
| PyPI | vllm | Not reported | 0.29.0 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Cpe | vllm | cpe | Not reported | 0.29.0 | Not reported | NVD-CVE-2026-93840 | Not reported |
| PyPI | vllm | PyPI | Not reported | 0.29.0 | Not reported | PYSEC-2026-3998 | Not reported |
OpenFactory catalog packages
No matching packages in this catalog.
Observed:
References
- [https://nvd.nist.gov/vuln/detail/CVE-2026-93840]
- [https://osv.dev/vulnerability/PYSEC-2026-3998]
- [https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93840.json]
- [https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3483.json]
[CERT-Bund public advisories] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]