CVE-2026-93841

Name of the Vulnerable Software and Affected Versions vLLM versions prior to 0.30.0

Description A memory corruption issue exists in the Triton bincount kernel function. The problem occurs when prompt token IDs index the penalty prompt-presence bitset without performing bounds checking against the vocabulary size. An attacker can exploit this by submitting multimodal audio requests containing tokens equal to the vocabulary size, leading to out-of-bounds writes. This action corrupts the sampler state of concurrent requests and alters the repetition penalty behavior.

Recommendations Update to version 0.30.0.