Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-114049— vLLM before 0.31.0 Stale allowed_token_ids Mask via InputBatch.condense

Quick assessment

Affected
vllm-project vllm
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

vLLM 0.31.0 之前的版本在 函数中存在跨请求掩码泄露漏洞。该漏洞允许远程攻击者通过留下过期的 行，来限制其他客户端的输出。攻击者可以提交并发的受限生成请求（包括通过未认证的 接口），导致被复用的批次槽将原本应用于攻击者的 token 白名单错误地施加到受害者的无限制请求上。

CVSS 3.7 · Low

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-114049

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
vLLM before 0.31.0 Stale allowed_token_ids Mask via InputBatch.condense
Source: CVE Program / CVE List V5
Vulnerability Description
vLLM before 0.31.0 contains a cross-request mask leak in InputBatch.condense() that allows remote attackers to constrain other clients' outputs by leaving stale allowed_token_ids rows. Attackers can submit concurrent constrained generate requests, including via unauthenticated /invocations, so recycled batch slots apply their token allowlist to victims' unrestricted requests.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
预期行为违背
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
vllm-project vllm 0 ~ 0.31.0 -

II. Public POCs for CVE-2026-114049

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-114049

请登录查看更多情报信息。

Other References for CVE-2026-114049 (2)

Same Patch Batch · vllm-project · 2026-10-21 · 7 CVEs total

CVE-2026-114053 8.1 HIGH vLLM 0.7.3 before 0.31.0 RCE via mm_processor_kwargs.code_revision
CVE-2026-114050 7.5 HIGH vLLM before 0.31.0 Remote Engine Crash via Forged Multimodal UUID
CVE-2026-114055 7.5 HIGH vLLM 0.7.3 before 0.31.0 DoS via Unvalidated mm_processor_kwargs
CVE-2026-114052 7.5 HIGH vLLM 0.25.0 before 0.31.0 MOSS-Audio Memory Exhaustion via /tokenize mm_processor_kwargs
CVE-2026-114051 7.5 HIGH vLLM before 0.31.0 Denial of Service via min_tokens in /inference/v1/generate
CVE-2026-114054 6.5 MEDIUM vLLM before 0.31.0 Cross-Request Cache Aliasing via EXIF ImageID and Prefix-Cache Keys

IV. Related Vulnerabilities

Same product: vllm
Same vendor: vllm-project
Same weakness: CWE-440

V. Comments for CVE-2026-114049

No comments yet

Leave a comment