CVE-2026-100647: vLLM versions before 0.29.0 contain a denial-of-service vulnerability in the cache_salt parameter accepted on OpenAI-com

vLLM (a software framework for running large language models) versions before 0.29.0 have a denial-of-service vulnerability in the cache_salt parameter, which is a value used for caching. Because this parameter has no size limit and is processed by a single scheduler thread (the component that manages task execution), attackers can send huge amounts of data that force expensive computational operations, causing the system to freeze and reject all other requests.