CVE-2026-100654: vLLM before 0.29.0 accepts user-controlled stop_token_ids on the OpenAI-compatible POST /v1/completions and POST /v1/cha

vLLM before version 0.29.0 has a vulnerability where it accepts user-controlled stop_token_ids (values that tell the AI when to stop generating text) on two endpoints without properly validating them. If a user sends an invalid token ID that doesn't exist in the model's vocabulary, it crashes the AI engine with a CUDA error (a low-level graphics processor operation), causing the service to stop working until it restarts, which is a denial of service attack (making a service unavailable).