CVE-2026-92365: A vulnerability was found in vllm-project vllm up to 0.29.0. Affected by this issue is some unknown functionality of the

A vulnerability was discovered in vllm (an open-source language model serving framework) version 0.29.0 and earlier, where a flaw in the thinking_budget_state.py file causes inefficient algorithmic complexity (meaning the code takes much longer to run than it should as the input size grows). This vulnerability can be triggered remotely, meaning an attacker doesn't need direct access to the affected system.