CVE-2026-105775: Out-of-Bounds Read in vllm-project vLLM

This vulnerability affects the vllm-project vLLM software up to version 0.31.0 in the conv_ssm_forward function of the file vllm/model_executor/layers/mamba/mamba_mixer2.py. It allows an attacker to perform an out-of-bounds read remotely, potentially leading to information disclosure or other impacts related to reading unauthorized memory. The issue was reported early to the project but remains unaddressed. The CVSS 4.0 score is 5.3, indicating medium severity, with attack vector network, low attack complexity, no privileges required, no user interaction, and limited impact on availability.

An attacker can remotely trigger an out-of-bounds read in the affected function, which may lead to unauthorized disclosure of memory contents or application instability. The vulnerability requires low privileges and no user interaction, increasing the risk of exploitation. However, the impact does not include code execution or privilege escalation based on the provided data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should monitor official channels for updates. Until a patch is available, consider restricting network access to the vulnerable service or applying other environment-specific controls to limit exposure.