Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2026-92365— vllm-project vllm thinking_budget_state.py algorithmic complexity

Quick assessment

Affected

vllm-project vllm

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 vllm-project 的 vllm 软件中（版本 0.29.0 及之前）发现了一个漏洞。该问题影响了文件中某个未知功能。攻击者可通过操纵相关输入导致算法复杂度低下效（即可能引发性能下降或拒绝服务）。该攻击可远程发起。修复此问题的合并请求（Pull Request）目前正在等待被接受（尚未正式合并）。

CVSS 4.3 · Medium EPSS 0.52% · P44 Updated Sep 23, 2026

Possible ATT&CK Techniques 1 AI

T1499 · Endpoint Denial of Service

Affected Version Matrix 29

Vendor	Product	Version Range	Status
vllm-project	vllm	`0.1`	affected
		`0.2`	affected
		`0.3`	affected
		`0.4`	affected
		`0.5`	affected
		`0.6`	affected
		`0.7`	affected
		`0.8`	affected
… +21 more rows

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

vllm-project vllm thinking_budget_state.py algorithmic complexity

Source: CVE Program / CVE List V5

Vulnerability Description

A vulnerability was found in vllm-project vllm up to 0.29.0. Affected by this issue is some unknown functionality of the file vllm/v1/sample/thinking_budget_state.py. The manipulation results in inefficient algorithmic complexity. It is possible to launch the attack remotely. The pull request to fix this issue awaits acceptance.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Source: CVE Program / CVE List V5

Vulnerability Type

算法复杂性

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
vllm-project	vllm	0.1	`cpe:2.3:a:vllm-project:vllm::::::::`

II. Public POCs for CVE-2026-92365

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-92365

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-92365 (1)

🔗 fix(security): restore incremental marker search cursors in thinking budget state by jperezdealgaba · Pull Request #51133 · vllm-project/vllm issue-tracking patch

Vendor Pages for CVE-2026-92365 (1)

🔗 GitHub - vllm-project/vllm: A high-throughput and memory-efficient inference and serving engine for LLMs · GitHub product

https://www.cve.org/CVERecord?id=CVE-2026-92365

Same Patch Batch · vllm-project · 2026-09-16 · 4 CVEs total

CVE-2026-57173	6.5 MEDIUM	vLLM: Unauthenticated audio decompression-bomb DoS in /v1/chat/completions
CVE-2026-69147	6.5 MEDIUM	vLLM: Request-selected PyNvVideoCodec GPU decode bypasses static VRAM reservation
CVE-2026-92220	5.3 MEDIUM	vllm-project vLLM MoRIIO Acknowledgement moriio_connector.py MoRIIOWrapper._handle_release

IV. Related Vulnerabilities

Same product: vllm

Same vendor: vllm-project

Same weakness: CWE-407