AIDEFEND SecureFlow / SecureFlow Case Index

vLLM Harmony: A Tool Continuation Drops the Tenant Cache Boundary

• AI Infrastructure
• Data Exfiltration

vLLM serves language models and reuses prompt-prefix computation to improve performance. In the affected GPT-OSS Harmony Responses tool loop, the first turn carried cache_salt but the tool continuation did not. Another tenant could submit a guessed continuation and inspect exact cached-token counts to test whether it had been processed. CVE-2026-105752 is an inference-cache membership leak, not arbitrary transcript extraction; the advisory lists 0.30.0 as fixed.