EUVD-2026-83617

vLLM through 0.29.0 fails to properly validate badwords token indices against the model's generation output width in SamplingParams.updatefromtokenizer. Attackers can supply out-of-bounds token indices that corrupt logits memory of concurrent requests, causing different in-flight HTTP requests to...

CVE-2026-93840

vLLM before 0.29.0 is vulnerable to cross-request logits corruption via the allowed_token_ids parameter. The root cause is in SamplingParams._validate_allowed_token_ids() , which validates token IDs against the tokenizer length rather than the model output logits width. An attacker can supply tok...