Medium severity4.3NVD Advisory· Published Sep 16, 2026· Updated Sep 22, 2026
CVE-2026-92365
CVE-2026-92365
Description
A vulnerability was found in vllm-project vllm up to 0.29.0. Affected by this issue is some unknown functionality of the file vllm/v1/sample/thinking_budget_state.py. The manipulation results in inefficient algorithmic complexity. It is possible to launch the attack remotely. The pull request to fix this issue awaits acceptance.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
5News mentions
1- VLLM: Batch of 17 Vulnerabilities Disclosed, Affecting LLM Inference Engine StabilityVypr Intelligence · Sep 21, 2026