CVE-2026-92365— vllm-project vllm thinking_budget_state.py algorithmic complexity
Quick assessment
Affected
vllm-project vllm
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 vllm-project 的 vllm 软件中（版本 0.29.0 及之前）发现了一个漏洞。该问题影响了文件 中某个未知功能。攻击者可通过操纵相关输入导致算法复杂度低下效（即可能引发性能下降或拒绝服务）。该攻击可远程发起。修复此问题的合并请求（Pull Request）目前正在等待被接受（尚未正式合并）。
Possible ATT&CK Techniques 1 AI
T1499 · Endpoint Denial of Service
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-92365
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
vllm-project vllm thinking_budget_state.py algorithmic complexity
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability was found in vllm-project vllm up to 0.29.0. Affected by this issue is some unknown functionality of the file vllm/v1/sample/thinking_budget_state.py. The manipulation results in inefficient algorithmic complexity. It is possible to launch the attack remotely. The pull request to fix this issue awaits acceptance.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
算法复杂性
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| vllm-project | vllm | 0.1 |
cpe:2.3:a:vllm-project:vllm:*:*:*:*:*:*:*:*
|
|
II. Public POCs for CVE-2026-92365
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-92365
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-92365 (1)
Vendor Pages for CVE-2026-92365 (1)
Same Patch Batch · vllm-project · 2026-09-16 · 3 CVEs total
| CVE-2026-57173 | 6.5 MEDIUM | vLLM: Unauthenticated audio decompression-bomb DoS in /v1/chat/completions |
| CVE-2026-92220 | 5.3 MEDIUM | vllm-project vLLM MoRIIO Acknowledgement moriio_connector.py MoRIIOWrapper._handle_release |
IV. Related Vulnerabilities
Same product: vllm
-
CVE-2026-57173
vLLM: Unauthenticated audio decompression-bomb DoS in /v1/ch -
CVE-2026-92220
vllm-project vLLM MoRIIO Acknowledgement moriio_connector.py -
CVE-2026-90878
vllm-project vLLM Jinja Template Rendering completions resou -
CVE-2026-90713
vllm-project vLLM tiktoken vocab File mod.rs new denial of s -
CVE-2026-90555
vLLM before 0.28.0 Denial of Service via Audio Header
Same vendor: vllm-project
-
CVE-2026-57173
vLLM: Unauthenticated audio decompression-bomb DoS in /v1/ch -
CVE-2026-92220
vllm-project vLLM MoRIIO Acknowledgement moriio_connector.py -
CVE-2026-90878
vllm-project vLLM Jinja Template Rendering completions resou -
CVE-2026-90713
vllm-project vLLM tiktoken vocab File mod.rs new denial of s -
CVE-2026-90554
vLLM before 0.28.0 Denial of Service via audio extraction
Same weakness: CWE-407
-
CVE-2026-19668
Resource Exhaustion via Excessive DNSSEC Cryptographic Mater -
CVE-2026-92091
Jwcrypto: jwcrypto: denial of service via o(n^2) duplicate c -
CVE-2026-49250
Conform: parseSubmission vulnerable to CPU exhaustion when p -
CVE-2026-86349
Mattermost Server Algorithmic DoS via Unbounded Markdown Blo -
CVE-2026-12882
Mattermost Markdown autolink parsing denial of service
V. Comments for CVE-2026-92365
No comments yet