FR
live
tag

#inference

vLLM lets an EPS image disguised as PNG reach Ghostscript and run code

On October 20, 2026, vLLM published CVE-2026-115915: its ImageMediaIO loader handed incoming bytes to Pillow’s format autodetection with no allowlist, so an EPS file labeled image/png reached the host’s Ghostscript binary and could execute commands. Anyone hosting a multimodal inference server should upgrade to 0.32.0 and restrict inputs to raster formats.

Reflection AI opens Beam, a 501B model that challenges Chinese open weights

On October 5, 2026, Reflection AI unveiled Beam, a 501-billion-parameter open-source model trained in eight weeks on NVIDIA hardware rented from SpaceX, and which approaches the performance of two-trillion-parameter models. For teams evaluating open-weight models, Beam shifts the cost-performance calculus, but its weights only land at the end of the month and still trail closed frontier models.

Hugging Face rewrites tokenizers in Rust with SIMD and encodes text up to 30× faster

On September 21, 2026, Hugging Face detailed version 1 of its tokenizers library: the same output as v0.23, but encoding 3 to 30 times faster single-threaded on an Apple M4 Max, thanks to SIMD bitstream splitting and a word cache. Teams serving LLMs now have a measured reason to look at the tokenizer — the new bottleneck as models get faster.

OpenRouter guarantees US residency for requests to Chinese models

Open-weight models accounted for 60% of OpenRouter’s US token consumption in August, most of them Chinese. The marketplace has now made US in-region routing generally available, guaranteeing that requests are decrypted, processed, and served entirely on American soil — or rejected.

OpenAI launches the Agents API and turns the Codex harness into a service

OpenAI opened an Agents API in public beta on September 10, 2026, selling Codex’s backend as a service to run agents unattended for days. The same day, the company paused sign-ups for its Pro plan under GPT-6 Astra demand: the bottleneck is shifting from models to infrastructure.

AWS taps Qualcomm for custom inference silicon and 1.6 Tbps optics

On September 8, 2026, Amazon Web Services announced a partnership with Qualcomm for custom AI inference silicon and 1.6 Tbps optical interconnect gear, under a commercial commitment that could reach $60 billion through September 2036. A strong signal about the diversification of AWS’s silicon supply chain — and about the real bottleneck of AI clusters: the network.

Stripe buys OpenRouter for $7B+ and takes control of the AI tollbooth

On August 16, 2026, Bloomberg reported that Stripe has finalized its acquisition of OpenRouter, the gateway providing access to 400+ AI models, for more than $7 billion. The deal puts inference routing and billing in the hands of a payments player — a consolidation signal to watch for anyone building on multiple models.

Type at least two characters.

↑ ↓ navigate ↵ open esc dismiss