CVE-2026-114049

A flaw was found in vLLM. A remote attacker can compromise the integrity of responses generated for other users by submitting concurrent constrained generation requests. Due to improper state cleanup during batch reorganization, restriction rules defining permitted response tokens can persist in...