CVE-2026-93989 | vllm-project vLLM up to 0.29.0 SamplingParams.update_from_tokenizer out-of-bounds

A vulnerability described as problematic has been identified in vllm-project vLLM up to 0.29.0. The impacted element is the function SamplingParams.update_from_tokenizer. Executing a manipulation can lead to out-of-bounds read.

This vulnerability is handled as CVE-2026-93989. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More