CVE-2026-100649
vLLM before 0.29.0 Resource Limit Bypass via Sampler Subclass
- State
- Published
- Severity
- 6.3 Medium
- Published
- Sep 26, 2026
- Updated
- Oct 2, 2026
- Reserved
- Sep 26, 2026
Description
vLLM before 0.29.0 contains a resource-limit bypass vulnerability in PyNvVideoCodec decoder allocation where sampler subclass shadowing allows independent counter increments. Unauthenticated attackers can select different sampler subclasses in video requests to exceed configured decoder limits and exhaust unaccounted GPU memory.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 6.3 Medium | CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N | VulnCheck |
| 3.1 | 3.7 Low | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L | VulnCheck |
Weaknesses
- CWE-770 Allocation of Resources Without Limits or Throttling
Affected Products
| Product | Versions |
|---|---|
vllmvllm-project |
|
References
- GitHub Security Advisory (GHSA-j682-9xp5-rrf3)vendor-advisory
- VulnCheck Advisory: vLLM before 0.29.0 Resource Limit Bypass via Sampler Subclassthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.