CVE-2026-93989: vLLM through 0.29.0 fails to properly validate bad_words token indices against the model's generation output width in Sa

vLLM (a framework for running large language models) versions up to 0.29.0 has a bug where it doesn't properly check if token indices (numerical identifiers for words) are within valid bounds when processing bad words filters. An attacker can exploit this by providing invalid token indices that corrupt the memory used for generating tokens (logits, which are scores the model assigns to possible next words), causing different user requests being handled at the same time to get wrong results.