CVE-2026-93436

A flaw was found in vLLM. A remote attacker can exploit this vulnerability by submitting specially crafted inference requests that are rejected but still cause the system to retain decode-side metadata. This improper cleanup leads to an unbounded exhaustion of decode-worker memory, resulting in a...

PYSEC-2026-3996

vLLM through 0.29.0 fails to properly clean up decode-side metadata for rejected inference requests in prefill/decode disaggregated deployments. Remote attackers can submit requests with maxtokens=0 to exhaust decode-worker memory without bound until the worker restarts...