CVE-2026-100647

A flaw was found in vLLM. An unauthenticated remote attacker can cause a Denial of Service DoS by sending HTTP requests containing an excessively large cachesalt parameter to exposed API endpoints. Because this input lacks maximum length validation, processing the oversized data consumes excessiv...