What’s Vulnerable › Vulnerabilities

CVE-2026-100649: vLLM before 0.29.0 Resource Limit Bypass via Sampler Subclass

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-26 · updated 2026-10-06
• Weakness: CWE-770

Description

vLLM before 0.29.0 contains a resource-limit bypass vulnerability in PyNvVideoCodec decoder allocation where sampler subclass shadowing allows independent counter increments. Unauthenticated attackers can select different sampler subclasses in video requests to exceed configured decoder limits and exhaust unaccounted GPU memory.

Affected products

• vllm-project vllm: before 0.29.0 — fixed in 0.29.0

How to fix

Upgrade to a fixed version: vllm-project vllm 0.29.0. Check the vendor advisory for mitigations.

References

• https://github.com/vllm-project/vllm/security/advisories/GHSA-j682-9xp5-rrf3
• https://www.vulncheck.com/advisories/vllm-before-0.29.0-resource-limit-bypass-via-sampler-subclass

Get alerted when CVE-2026-100649 or the next vulnerability affects your stack