CVE-2026-93840

Name of the Vulnerable Software and Affected Versions vLLM versions prior to 0.29.0

Description The SamplingParams. validate allowed token ids() function validates allowed token ids against the tokenizer length rather than the model output logits width. This allows attackers to provide token IDs that exceed the output vocabulary but still pass validation. Consequently, the LogitBiasState can corrupt the GPU logits state, enabling concurrent requests to sample tokens that are outside their designated allowlists.

Recommendations Update vLLM to version 0.29.0 or later.