CVE-2026-100651 vllm before 0.29.0 Denial of Service via Decoder Prompt Length Bypass

vLLM before 0.29.0 fails to enforce decoder prompt-length validation on the disaggregated serving endpoint /inference/v1/generate. When the request contains a 'features' multimodal payload, vllm/entrypoints/serve/disagg/serving.py builds a multimodal EngineInput directly from the caller-supplied...

CVE-2026-100651

vLLM before 0.29.0 fails to enforce decoder prompt-length validation on the disaggregated serving endpoint /inference/v1/generate. When the request contains a 'features' multimodal payload, vllm/entrypoints/serve/disagg/serving.py builds a multimodal EngineInput directly from the caller-supplied...

Leaky Students: Membership Inference against On-Policy Distillation

On-policy distillation OPD trains a student to match a teacher's next-token distributions on student-generated trajectories. However, privileged information supplied to the teacher for OPD training may contain sensitive data. Whether the student leaks private information about the records supplie...

CVE-2026-100651: Uncontrolled Resource Consumption

vLLM before 0.29.0 fails to enforce decoder prompt-length validation on the disaggregated serving endpoint /inference/v1/generate. When the request contains a 'features' multimodal payload, vllm/entrypoints/serve/disagg/serving.py builds a multimodal EngineInput directly from the caller-supplied...

CVE-2026-98043

In the Linux kernel, the following vulnerability has been resolved: bpf: Don't infer non-NULL from a pointer with an unbounded offset regnotnull decides that a register holds a non-NULL value by looking at its type alone. For pointer types that allow arithmetic the type only guarantees a non-NULL...

Breaking the Black Box: Byte-Level Boundary Inference of Real-World Antivirus Systems

Whitepaper called Breaking The Black Box: Byte-Level Boundary Inference Of Real-World Antivirus Systems...

FragToken: Amplifying LLM Inference Costs through Noncanonical Token Generation

As large language model LLM inference becomes increasingly expensive, resource-consumption attacks pose a growing threat to model providers. Existing attacks typically amplify cost by inducing abnormally long or repetitive outputs on attacker-controlled or triggered requests, making them easier t...

Linux Distros Unpatched Vulnerability : CVE-2026-98134

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: checkcondjmpop: properly infer if register is null Nicholas Carlini reported a bug when verifier can incorrectly infer that a pointer is non-null. The bug...

TP-CRIV: A Framework for Third-Party Challenge-Response Identity Verification of AI Models

Artificial intelligence AI models are increasingly deployed through remote services, making model misappropriation a growing concern. Existing approaches, including watermarking, fingerprinting, and model similarity analysis, primarily rely on predefined evidence or direct behavioral comparison a...

Important: Red Hat Security Advisory: Red Hat AI Inference Model Optimization Tools 3.4.5 (cuda)

Red Hat AI Inference Model Optimization Tools 3.4.5 cuda is now available. Red Hat AI Inference Model Optimization Tools...

Important: Red Hat Security Advisory: Red Hat AI Inference 3.4.5 (rocm)

Red Hat AI Inference 3.4.5 rocm is now available. Red Hat AI Inference...

Important: Red Hat Security Advisory: Red Hat AI Inference 3.4.5 (cuda)

Red Hat AI Inference 3.4.5 cuda is now available. Red Hat AI Inference...

Important: Red Hat Security Advisory: Red Hat AI Inference 3.4.5 (spyre)

Red Hat AI Inference 3.4.5 spyre is now available. Red Hat AI Inference...

Important: Red Hat Security Advisory: Red Hat AI Inference 3.4.5 (cpu)

Red Hat AI Inference 3.4.5 cpu is now available. Red Hat AI Inference...

Important: Red Hat Security Advisory: Red Hat AI Inference 3.4.5 (rocm)

Red Hat AI Inference 3.4.5 rocm is now available. Red Hat AI Inference...

Important: Red Hat Security Advisory: Red Hat AI Inference Model Optimization Tools 3.4.5 (cuda)

Red Hat AI Inference Model Optimization Tools 3.4.5 cuda is now available. Red Hat AI Inference Model Optimization Tools...

Important: Red Hat Security Advisory: Red Hat AI Inference 3.4.5 (cuda)

Red Hat AI Inference 3.4.5 cuda is now available. Red Hat AI Inference...

Important: Red Hat Security Advisory: Red Hat AI Inference 3.4.5 (cpu)

Red Hat AI Inference 3.4.5 cpu is now available. Red Hat AI Inference...

Important: Red Hat Security Advisory: Red Hat AI Inference 3.4.5 (spyre)

Red Hat AI Inference 3.4.5 spyre is now available. Red Hat AI Inference...

gllm-core-binary (>=0.0.0.dev0, <=0.4.4b3), gllm-inference-binary (0.5.51b3) +5 more potentially affected by CVE-2026-102937 via virtualenv (20.30.0)

virtualenv PYPI version 20.30.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - gllm-core-binary =0.0.0.dev0, =0.3.149, =0.1.0, =1.0.51, =0.4.4, =0.4.8 Source cves: CVE-2026-102937 Source advisory: OSV:PYSEC-2026-4014...