GPU VulnDB

Database/AI/ML frameworks & serving

vLLM - sampling parameter validation: Temperature validation uses strict comparison operators, so boundary values slip

CVE-2026-54235AI/ML frameworks & servingcurated

Impact

Temperature validation uses strict comparison operators, so boundary values slip through the gate silently. In a multi-tenant serving deployment this is a request-parameter validation gap rather than memory corruption, but it lets a caller push the engine into a sampling state the operator believed was fenced off - which matters where sampling parameters are part of a tenant-facing safety or cost control.

Who can reach it

Network. Any client able to submit a request with sampling parameters to the vLLM endpoint.

What to do

Upgrade to vLLM 0.23.1rc0 or later and roll the serving deployment. Cost: rolling restart of the inference tier; no driver or firmware change.

References

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.