PT-2026-95639

Name of the Vulnerable Software and Affected Versions vLLM versions prior to 0.29.0 Description The SamplingParams. validate allowed token ids function validates allowed token ids against the tokenizer length rather than the model output logits width. This allows attackers to provide token IDs th...