CVE-2026-100649— vLLM before 0.29.0 Resource Limit Bypass via Sampler Subclass

Quick assessment

Copy summary Copy citation

Affected

vllm-project vllm

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 vLLM 0.29.0 之前的版本中，存在一个 PyNvVideoCodec 解码器分配中的资源限制绕过漏洞。该漏洞通过采样器子类阴影（sampler subclass shadowing）机制，允许独立递增计数器。未经验证的攻击者可以在视频请求中选择不同的采样器子类，从而突破配置的解码器限制，并耗尽未被计数的 GPU 内存。

CVE-2026-100649 affects vllm-project vllm. No confirmed in-the-wild exploitation; assess based on exposure. 在 vLLM 0.29.0 之前的版本中，存在一个 PyNvVideoCodec 解码器分配中的资源限制绕过漏洞。该漏洞通过采样器子类阴影（sampler subclass shadowing）机制，允许独立递增计数器。未经验证的攻击者可以在视频请求中选择不同的采样器子类，从而突破配置的解码器限制，并耗尽未被计数的 GPU 内存。 CVE-2026-100649 vulnerability details, Shenlong CVE Platform, https://cve.imfht.com/detail/CVE-2026-100649

I. Basic Information for CVE-2026-100649

Affected Products

II. Public POCs for CVE-2026-100649

III. Intelligence Information for CVE-2026-100649

Vendor Advisories for CVE-2026-100649 (1)

• 🔗 vLLM before 0.29.0 Resource Limit Bypass via Sampler Subclass | Advisories | VulnCheck third-party-advisory

Other References for CVE-2026-100649 (1)

• https://github.com/vllm-project/vllm/security/advisories/GHSA-j682-9xp5-rrf3 vendor-advisory

• https://www.cve.org/CVERecord?id=CVE-2026-100649

Same Patch Batch · vllm-project · 2026-09-26 · 8 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2026-100649