CVE-2026-100647: vLLM before 0.29.0 CPU Exhaustion via unbounded cache_salt

Published Sep 26, 2026
·
Updated

vLLM versions before 0.29.0 contain a denial-of-service vulnerability in the cachesalt parameter accepted on OpenAI-compatible and Anthropic API endpoints, which lacks maximum length validation and is processed on the single EngineCore scheduler thread. Unauthenticated attackers can send HTTP requests with multi-hundred-megabyte salt values that trigger expensive pickle serialization and SHA-256 hashing, stalling the scheduler thread and denying service to all concurrent requests.

Affected Software

1 affected component
vllm vllm<0.29.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade vLLM to a version that resolves this vulnerability.

    Fixed in 0.29.0

Event History

Sep 26, 2026
CVE Published
via MITRE·01:23 PM
Data Sourced
via MITRE·01:23 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:16 PM
DescriptionSeverityWeakness

Frequently Asked Questions

1

Who can exploit this issue?

Any unauthenticated network client that can reach vLLM's OpenAI-compatible or Anthropic API endpoints can submit a request with an oversized cache_salt value. No privileges or user interaction are required.

2

What is the operational impact of exploitation?

A multi-hundred-megabyte cache_salt can force expensive pickle serialization and SHA-256 hashing on the single EngineCore scheduler thread. This stalls that thread and can deny service to all concurrent requests.

3

Are deployments using the affected API endpoints exposed by default?

The affected endpoints accept the cache_salt parameter without maximum-length validation in versions before 0.29.0. Exposure depends on whether unauthenticated clients can reach those OpenAI-compatible or Anthropic API endpoints.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203