CVE-2026-92365
EUVD-2026-8077116.09.2026, 14:17
A vulnerability was found in vllm-project vllm up to 0.29.0. Affected by this issue is some unknown functionality of the file vllm/v1/sample/thinking_budget_state.py. The manipulation results in inefficient algorithmic complexity. It is possible to launch the attack remotely. The pull request to fix this issue awaits acceptance.Enginsight
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| vllm | vllm | 0.1 | CNA |
| vllm | vllm | 0.2 | CNA |
| vllm | vllm | 0.3 | CNA |
| vllm | vllm | 0.4 | CNA |
| vllm | vllm | 0.5 | CNA |
| vllm | vllm | 0.6 | CNA |
| vllm | vllm | 0.7 | CNA |
| vllm | vllm | 0.8 | CNA |
| vllm | vllm | 0.9 | CNA |
| vllm | vllm | 0.10 | CNA |
| vllm | vllm | 0.11 | CNA |
| vllm | vllm | 0.12 | CNA |
| vllm | vllm | 0.13 | CNA |
| vllm | vllm | 0.14 | CNA |
| vllm | vllm | 0.15 | CNA |
| vllm | vllm | 0.16 | CNA |
| vllm | vllm | 0.17 | CNA |
| vllm | vllm | 0.18 | CNA |
| vllm | vllm | 0.19 | CNA |
| vllm | vllm | 0.20 | CNA |
| vllm | vllm | 0.21 | CNA |
| vllm | vllm | 0.22 | CNA |
| vllm | vllm | 0.23 | CNA |
| vllm | vllm | 0.24 | CNA |
| vllm | vllm | 0.25 | CNA |
| vllm | vllm | 0.26 | CNA |
| vllm | vllm | 0.27 | CNA |
| vllm | vllm | 0.28 | CNA |
| vllm | vllm | 0.29.0 | CNA |
Common Weakness Enumeration