Medium
vLLM before 0.29.0 CPU Exhaustion via unbounded cache_salt
Type: advisorySource: Official CVE List
vLLM versions before 0.29.0 contain a denial-of-service vulnerability in the cache_salt parameter accepted on OpenAI-compatible and Anthropic API endpoints, which lacks maximum length validation and is processed on th…
Products: vllmCVEs: CVE-2026-100647