2541914 – (CVE-2026-100649) CVE-2026-100649 vllm: vLLM: Denial of service via sampler subclass decoder limit bypass

Bug 2541914 (CVE-2026-100649) - CVE-2026-100649 vllm: vLLM: Denial of service via sampler subclass decoder limit bypass

Summary: CVE-2026-100649 vllm: vLLM: Denial of service via sampler subclass decoder li...

Keywords:
Status:	NEW
Alias:	CVE-2026-100649
Product:	Security Response
Classification:	Other
Component:	vulnerability
Sub Component:
Version:	unspecified
Hardware:	All
OS:	Linux
Priority:	low
Severity:	low
Target Milestone:	---
Assignee:	Product Security DevOps Team
QA Contact:
Docs Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+	depends on / blocked

Reported:	2026-09-26 13:42 UTC by OSIDB Bzimport
Modified:	2026-09-27 12:03 UTC (History)
CC List:	4 users (show)
Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments	(Terms of Use)

Description OSIDB Bzimport 2026-09-26 13:42:43 UTC

vLLM before 0.29.0 contains a resource-limit bypass vulnerability in PyNvVideoCodec decoder allocation where sampler subclass shadowing allows independent counter increments. Unauthenticated attackers can select different sampler subclasses in video requests to exceed configured decoder limits and exhaust unaccounted GPU memory.

Note You need to log in before you can comment on or make changes to this bug.