CVE-2026-114049
Low · 3.7CVSS
3.7
EPSS
0.3%
Published
Oct 21, 2026
CISA due date
—
The record
vLLM before 0.31.0 contains a cross-request mask leak in InputBatch.condense() that allows remote attackers to constrain other clients' outputs by leaving stale allowed_token_ids rows. Attackers can submit concurrent constrained generate requests, including via unauthenticated /invocations, so recycled batch slots apply their token allowlist to victims' unrestricted requests.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-97687 urllib3 is an HTTP client library for Python. CWE-440
- CVE-2026-35191 Issue summary: The OpenSSL QUIC server, when configured to not preform address… CWE-440
- CVE-2026-16769 An unencrypted 'pause encryption request' message causes a denial of service in the in… CWE-440
- CVE-2026-65934 An unencrypted 'pause encryption request' message causes a denial of service in the BT122… CWE-440
- CVE-2026-65932 The BT122 module stops advertising after receiving a plaintext 'pause enceryption… CWE-440
- CVE-2026-8806 Expected Behavior Violation vulnerability in Mitsubishi Electric MELSEC iQ-F Series… CWE-440
- CVE-2026-42752 Unauthenticated Bypass Vulnerability in Stripe Payments <= 2.0.98 versions. CWE-440
- CVE-2026-49316 Expected behavior violation in the in-vehicle network of the Indian Motorcycle Scout… CWE-440