vLLM: Harmony tool continuations drop `cache_salt` — restoring a cross-tenant prefix-cache membership oracle

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-105752 · Microsoft / collected KEV context

cve-program · CVE-2026-105752

• https://github.com/vllm-project/vllm/security/advisories/GHSA-935w-9g4m-p28p
• https://github.com/vllm-project/vllm/pull/50195
• https://github.com/vllm-project/vllm/pull/51818
• https://github.com/vllm-project/vllm/commit/6a2a2bb02b563b83f946012959fd3927984d072a
• https://github.com/vllm-project/vllm/releases/tag/v0.30.0

No related operational record is retained in the current change model.