CVE-2026-100649CWE-770denial-of-service

CVE-2026-100649

Low · published September 26, 2026

CVSS v3.1
3.7
EPSS
0%
Percentile
26.3
In the wild
Unconfirmed
What it is

vLLM before 0.29.0 contains a resource-limit bypass vulnerability in PyNvVideoCodec decoder allocation where sampler subclass shadowing allows independent counter increments. Unauthenticated attackers can select different sampler subclasses in video requests to exceed configured decoder limits and exhaust unaccounted GPU memory.

The record
Technical detail
CVSS v3.1
3.7 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
6.3 · CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
EPSS
0.00341 · 26.3th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2026-09-26T18:16Z
Affected products (1)
ProductVersionsFixed in
vllm/vllm< 0.29.00.29.0
References (2)
https://github.com/vllm-project/vllm/security/advisories/GHSA-j682-9xp5-rrf3 · [email protected]https://www.vulncheck.com/advisories/vllm-before-0.29.0-resource-limit-bypass-via-sampler-subclass · [email protected]
EPSS history
Timeline
  • 28 SEP 03:25Z
    EPSS moved — → 0%
    epss
  • 26 SEP 13:23Z
    vLLM before 0.29.0 Resource Limit Bypass via Sampler Subclass
    cvelistv5