{"data":{"id":"a0dc1847-d74c-4544-9bc0-b1f0c03edc93","title":"CVE-2026-100651: vLLM before 0.29.0 fails to enforce decoder prompt-length validation on the disaggregated serving endpoint…","summary":"vLLM versions before 0.29.0 do not enforce decoder prompt-length validation on the disaggregated serving endpoint /inference/v1/generate when a request includes a 'features' multimodal payload. The GenerateRequest.token_ids list is not checked against model_config.max_model_len, and processors reporting skip_prompt_length_check=True (such as Nemotron Parse, Whisper, and FireRedLID) bypass validation entirely. A client that can reach the endpoint on an affected configuration can submit an overlong token_ids list and crash the worker, causing denial of service.","solution":"Fixed in 0.29.0.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-100651","publishedAt":"2026-09-26T14:16:47.663Z","cveId":"CVE-2026-100651","cweIds":["CWE-400"],"cvssScore":"6.5","cvssSeverity":"medium","severity":"medium","attackType":["denial_of_service"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["vLLM"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"vLLM denial of service via overlong prompt on disaggregated generate endpoint","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00384,"epssCheckedAt":"2026-11-11T12:09:49.359Z","kevDateAdded":null,"advisoryAliases":["GHSA-g43f-v3gj-45x5"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-08T06:09:31.335Z","patchAvailable":null,"disclosureDate":"2026-09-26T14:16:47.663Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-125","CAPEC-130"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["availability"],"aiComponentTargeted":"inference","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null,"fixes":[]}}