CVE-2026-93989

Name of the Vulnerable Software and Affected Versions vLLM versions prior to 0.29.1

Description The software fails to properly validate bad words token indices against the model's generation output width within the SamplingParams.update from tokenizer() function. This allows attackers to provide out-of-bounds token indices, which can corrupt the logits memory of concurrent requests. Consequently, other active HTTP requests may return incorrect tokens.

Recommendations Update vLLM to version 0.29.1 or later.