CVE-2026-93989

vLLM through 0.29.0 fails to properly validate bad_words token indices against the model's generation output width in SamplingParams.update_from_tokenizer(). Attackers can supply out-of-bounds token indices that corrupt logits memory of concurrent requests, causing different in-flight HTTP requests to return incorrect tokens.

CVSS v3 3.1 LOW

3.1^/10

CVSS v3 : LOW

V3 Legend

Vector :

Exploitability : 1.6 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/vllm-project/vllm	Product
https://github.com/vllm-project/vllm/blob/98dff2a81d747d1dba01a47f939f48c3526d4206/vllm/sampling_params.py#L694-L753	Product
https://github.com/vllm-project/vllm/blob/98dff2a81d747d1dba01a47f939f48c3526d4206/vllm/v1/worker/gpu/sample/bad_words.py	Product
https://github.com/vllm-project/vllm/pull/48824	Issue Tracking Patch
https://www.vulncheck.com/advisories/vllm-through-0.29.0-cross-request-logits-corruption-via-bad-words	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:vllm:vllm:*:*:*:*:*:*:*:*

History

28 Sep 2026, 18:38

Type	Values Removed	Values Added
References	~~() https://github.com/vllm-project/vllm -~~	() https://github.com/vllm-project/vllm - Product
References	~~() https://github.com/vllm-project/vllm/blob/98dff2a81d747d1dba01a47f939f48c3526d4206/vllm/sampling_params.py#L694-L753 -~~	() https://github.com/vllm-project/vllm/blob/98dff2a81d747d1dba01a47f939f48c3526d4206/vllm/sampling_params.py#L694-L753 - Product
References	~~() https://github.com/vllm-project/vllm/blob/98dff2a81d747d1dba01a47f939f48c3526d4206/vllm/v1/worker/gpu/sample/bad_words.py -~~	() https://github.com/vllm-project/vllm/blob/98dff2a81d747d1dba01a47f939f48c3526d4206/vllm/v1/worker/gpu/sample/bad_words.py - Product
References	~~() https://github.com/vllm-project/vllm/pull/48824 -~~	() https://github.com/vllm-project/vllm/pull/48824 - Issue Tracking, Patch
References	~~() https://www.vulncheck.com/advisories/vllm-through-0.29.0-cross-request-logits-corruption-via-bad-words -~~	() https://www.vulncheck.com/advisories/vllm-through-0.29.0-cross-request-logits-corruption-via-bad-words - Third Party Advisory
First Time		Vllm vllm Vllm
CPE		cpe:2.3:a:vllm:vllm::::::::

19 Sep 2026, 23:17

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-09-19 23:17

Updated : 2026-09-28 18:38

NVD link : CVE-2026-93989

Mitre link : CVE-2026-93989

CVE.ORG link : CVE-2026-93989

JSON object : View

Products Affected

vllm

vllm

CWE

CWE-129

Improper Validation of Array Index

3.1 /10