CVE-2026-100647

Name of the Vulnerable Software and Affected Versions vLLM versions prior to 0.29.0

Description A denial-of-service issue exists in OpenAI-compatible and Anthropic API endpoints. The cache salt parameter lacks maximum length validation and is processed on the single EngineCore scheduler thread. Unauthenticated attackers can send HTTP requests containing salt values of several hundred megabytes, triggering expensive pickle serialization and SHA-256 hashing. This process stalls the scheduler thread, denying service to all concurrent requests. Real-world incidents of this issue being exploited have been reported.

Recommendations Update to version 0.29.0 or later. As a temporary mitigation, restrict or avoid using the cache salt parameter in API requests.