Evidence · DiggingBeagle record
Chainguard: The first disclosure from our Mythos harness
October 13 original report of output control across concurrent clients in vLLM through stale token-allowlist state.
- Source role
- primary disclosure
Evidence record
October 13 original report of output control across concurrent clients in vLLM through stale token-allowlist state.
Claim-level citations (2)
- supportsvLLM request-slot reuse carried one client’s token restriction into another request: Chainguard reports versions before v0.31.0 were affected and demonstrated output changes without ordinary request errors.
The vLLM bug, controlled reproduction and version disclosure
- supportsvLLM request-slot reuse carried one client’s token restriction into another request: A stale allowed_token_ids mask from a prior request could affect a later request using the same compacted serving slot.
The vLLM bug and request-slot compaction