{"data":{"id":"7aeff2c7-16bf-40b5-9abc-cd998678c017","title":"CVE-2026-92365: A vulnerability was found in vllm-project vllm up to 0.29.0. Affected by this issue is some unknown functionality of…","summary":"A vulnerability was found in vllm-project vllm up to 0.29.0. The flaw sits in unspecified functionality of vllm/v1/sample/thinking_budget_state.py and is triggered by manipulation that results in inefficient algorithmic complexity. It can be exploited remotely.","solution":"The pull request to fix this issue awaits acceptance.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-92365","publishedAt":"2026-09-16T14:17:16.897Z","cveId":"CVE-2026-92365","cweIds":["CWE-404","CWE-407"],"cvssScore":"4.3","cvssSeverity":"medium","severity":"medium","attackType":["denial_of_service"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["vLLM"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"vLLM inefficient algorithmic complexity in thinking budget state handling","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00521,"epssCheckedAt":"2026-11-04T12:08:33.434Z","kevDateAdded":null,"advisoryAliases":["GHSA-mcqv-hjvx-mmqr"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-01T00:10:44.657Z","patchAvailable":null,"disclosureDate":"2026-09-16T14:17:16.897Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["availability"],"aiComponentTargeted":"inference","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}