From e00a034ad1d7c8ccce28f135fa9380dd9110e525 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Juan=20P=C3=A9rez=20de=20Algaba?= <124347725+jperezdealgaba@users.noreply.github.com> Date: Fri, 21 Aug 2026 18:07:19 +0200 Subject: [PATCH] =?UTF-8?q?(security)=20fix:=20enforce=20decoder=20prompt-?= =?UTF-8?q?length=20validation=20for=20skip-che=E2=80=A6=20(#46588)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: jperezde --- vllm/v1/engine/input_processor.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/vllm/v1/engine/input_processor.py b/vllm/v1/engine/input_processor.py index 2b2ff4bab8..4cc433cbfe 100644 --- a/vllm/v1/engine/input_processor.py +++ b/vllm/v1/engine/input_processor.py @@ -438,7 +438,7 @@ class InputProcessor: prompt_len: int, prompt_type: Literal["encoder", "decoder"], ): - if self.skip_prompt_length_check: + if self.skip_prompt_length_check and prompt_type == "encoder": return if prompt_len == 0 and prompt_type == "decoder":