CVE-2026-71486

creationtimestamp| type| source ---|---|--- 2026-09-05 03:31:23+00:00| seen| https://gist.github.com/alon710/f1f72dae7d8a1a049a639d5207c64786...

CVE-2026-71486 vLLM: Derender endpoints decode caller-supplied GenerateResponse token IDs without output bounds

vLLM is an inference and serving engine for large language models. Prior to 0.26.0, the /v1/completions/derender and /v1/chat/completions/derender endpoints accept caller-supplied GenerateResponse objects whose generateresponses, choices, tokenids, promptlogprobs, logprobs.content, toplogprobs, a...