rootpwn

low · CVSS v3 3.1 · CVSS v4 2.3

CVE-2026-93989

vLLM through 0.29.0 fails to properly validate bad_words token indices against the model's generation output width in Sa…

Description

vLLM through 0.29.0 fails to properly validate bad_words token indices against the model's generation output width in SamplingParams.update_from_tokenizer(). Attackers can supply out-of-bounds token indices that corrupt logits memory of concurrent requests, causing different in-flight HTTP requests to return incorrect tokens.

Scores

Severity
low
CVSS v2
2.1
CVSS v3
3.1
CVSS v4
2.3
EPSS
—

← All CVEs

Related CVEs

low

CVE-2026-86551

The Z80Ultra (NX741J) product contains a vulnerability where non-privileged programs can retrieve the Wi-Fi MAC address by querying the read-only field factory_mac_address in the Settings.Secure database.

View analysis

low

CVE-2026-94055

Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free.

View analysis

low

CVE-2026-92403

The Secure Custom Fields WordPress plugin before version 6.9.4 fails to properly verify front-end form submissions against the originally rendered form. This allows unauthenticated remote attackers to submit data against arbitrary registered forms and modify bound post titles and content. The flaw exposes content integrity risks on affected WordPress sites.

View analysis

low

CVE-2026-93986

rclone before version 1.75.1 does not properly confine object names received from server and third-party listing responses to the expected directory. This flaw permits crafted path traversal sequences containing slashes and parent directory references within object names. Although downstream local backend protections currently prevent actual file escape, the vulnerability creates potential risks in how paths are processed.

View analysis