CVE-2026-105752

A flaw was found in vLLM. When multi-turn requests using tool continuations are processed, the service fails to retain the cache salt parameter, causing cached data to be placed in a shared, unsalted cache namespace rather than an isolated tenant cache. An authenticated tenant with knowledge of a...