Bug 2558029 (CVE-2026-114049)
| Summary: | CVE-2026-114049 vllm: vLLM: Output manipulation via stale token filter reuse in batch processing | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability | Assignee: | Product Security DevOps Team <prodsec-dev> |
| Status: | NEW --- | QA Contact: | |
| Severity: | low | Docs Contact: | |
| Priority: | low | ||
| Version: | unspecified | CC: | alinfoot, bbrownin, dtrifiro, mwoodson, weaton |
| Target Milestone: | --- | Keywords: | Security |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
A flaw was found in vLLM. A remote attacker can compromise the integrity of responses generated for other users by submitting concurrent constrained generation requests. Due to improper state cleanup during batch reorganization, restriction rules defining permitted response tokens can persist in recycled memory slots. As a result, an attacker's token restrictions can be inadvertently enforced on unrelated client requests, improperly constraining their model outputs.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
OSIDB Bzimport
2026-10-21 01:01:53 UTC
|