CVE-2026-94626: vLLM through 0.29.0 fails to validate the tp_size parameter in kv_transfer_params on OpenAI-compatible completion endpoi

vLLM (a popular open-source LLM serving framework) versions up to 0.29.0 don't properly check the tp_size parameter (a setting that controls how a model is split across multiple processors) when handling requests through its OpenAI-compatible API endpoints. This allows attackers to submit extremely large tp_size values that cause the system to use unlimited memory, crashing the decode worker (the part that generates responses) through an out-of-memory error.