← Back
2026-09-26 13:23CVE-2026-100649VulnCheck
PUBLISHED5.2CWE-770

vLLM before 0.29.0 Resource Limit Bypass via Sampler Subclass

vLLM before 0.29.0 contains a resource-limit bypass vulnerability in PyNvVideoCodec decoder allocation where sampler subclass shadowing allows independent counter increments. Unauthenticated attackers can select different sampler subclasses in video requests to exceed configured decoder limits and exhaust unaccounted GPU memory.

Problem type

Affected products

vllm-project

vllm

< 0.29.0 - AFFECTED

0.29.0 - UNAFFECTED

References

GitHub Security Advisory (GHSA-j682-9xp5-rrf3)

https://github.com/vllm-project/vllm/security/advisories/GHSA-j682-9xp5-rrf3

vendor-advisory
VulnCheck Advisory: vLLM before 0.29.0 Resource Limit Bypass via Sampler Subclass

https://www.vulncheck.com/advisories/vllm-before-0.29.0-resource-limit-bypass-via-sampler-subclass

third-party-advisory

GitHub Security Advisories

GHSA-hf74-6fwg-ghj7

vLLM before 0.29.0 contains a resource-limit bypass vulnerability in PyNvVideoCodec decoder...

https://github.com/advisories/GHSA-hf74-6fwg-ghj7

vLLM before 0.29.0 contains a resource-limit bypass vulnerability in PyNvVideoCodec decoder allocation where sampler subclass shadowing allows independent counter increments. Unauthenticated attackers can select different sampler subclasses in video requests to exceed configured decoder limits and exhaust unaccounted GPU memory.

github.com

https://github.com/vllm-project/vllm/security/advisories/GHSA-j682-9xp5-rrf3

nvd.nist.gov

https://nvd.nist.gov/vuln/detail/CVE-2026-100649

vulncheck.com

https://www.vulncheck.com/advisories/vllm-before-0.29.0-resource-limit-bypass-via-sampler-subclass

github.com

https://github.com/advisories/GHSA-hf74-6fwg-ghj7

JSON source

https://cveawg.mitre.org/api/cve/CVE-2026-100649
Click to expand
{
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "cveMetadata": {
    "cveId": "CVE-2026-100649",
    "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
    "assignerShortName": "VulnCheck",
    "dateUpdated": "2026-09-26T13:23:19.687Z",
    "dateReserved": "2026-09-26T02:33:07.898Z",
    "datePublished": "2026-09-26T13:23:19.687Z",
    "state": "PUBLISHED"
  },
  "containers": {
    "cna": {
      "providerMetadata": {
        "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
        "shortName": "VulnCheck",
        "dateUpdated": "2026-09-26T13:23:19.687Z"
      },
      "datePublic": "2026-09-12T00:00:00.000Z",
      "title": "vLLM before 0.29.0 Resource Limit Bypass via Sampler Subclass",
      "descriptions": [
        {
          "lang": "en",
          "value": "vLLM before 0.29.0 contains a resource-limit bypass vulnerability in PyNvVideoCodec decoder allocation where sampler subclass shadowing allows independent counter increments. Unauthenticated attackers can select different sampler subclasses in video requests to exceed configured decoder limits and exhaust unaccounted GPU memory."
        }
      ],
      "affected": [
        {
          "vendor": "vllm-project",
          "product": "vllm",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "0.29.0"
            },
            {
              "version": "0.29.0",
              "status": "unaffected",
              "versionType": "semver"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "lang": "en",
              "description": "Allocation of Resources Without Limits or Throttling",
              "cweId": "CWE-770",
              "type": "CWE"
            }
          ]
        }
      ],
      "references": [
        {
          "url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-j682-9xp5-rrf3",
          "name": "GitHub Security Advisory (GHSA-j682-9xp5-rrf3)",
          "tags": [
            "vendor-advisory"
          ]
        },
        {
          "url": "https://www.vulncheck.com/advisories/vllm-before-0.29.0-resource-limit-bypass-via-sampler-subclass",
          "name": "VulnCheck Advisory: vLLM before 0.29.0 Resource Limit Bypass via Sampler Subclass",
          "tags": [
            "third-party-advisory"
          ]
        }
      ],
      "metrics": [
        {
          "format": "CVSS"
        },
        {
          "format": "CVSS",
          "cvssV3_1": {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "attackVector": "NETWORK",
            "attackComplexity": "HIGH",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "LOW",
            "baseScore": 3.7,
            "baseSeverity": "LOW"
          }
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "JPengLi",
          "type": "reporter"
        },
        {
          "lang": "en",
          "value": "jperezdealgaba",
          "type": "coordinator"
        }
      ]
    }
  }
}