THREATOPS
THREAT OPSThreat News › [GHSA] GHSA-7m6h-x95x-82q5 (medium) — vLLM: Cross-User Data Leak Vulnerability

[GHSA] GHSA-7m6h-x95x-82q5 (medium) — vLLM: Cross-User Data Leak Vulnerability

highgithub_advisoriesPublished 2026-09-08

GHSA-7m6h-x95x-82q5 Severity: medium CVE: CVE-2026-73558

vLLM: Cross-User Data Leak Vulnerability

### Summary An integer overflow in the act_and_mul_kernel kernel can cause the output of one user request to be incorporated into the response of another request within the same inference batch. Under certain conditions, the last request in a batch can receive a partial or complete copy of the first

Indicators of compromise

Original source: https://github.com/advisories/GHSA-7m6h-x95x-82q5