CVE-2026-105752 | vllm-project vLLM up to 0.29.x Prefix Caching /v1/responses cache_salt isolation

October 6, 2026 Yanac

A vulnerability was found in vllm-project vLLM up to 0.29.x. It has been classified as problematic. This vulnerability affects unknown code of the file /v1/responses of the component Prefix Caching. This manipulation of the argument cache_salt causes improper isolation or compartmentalization.

This vulnerability is registered as CVE-2026-105752. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More