Vulnerability in vllm-project vllm

[ Description ]Official description

vLLM from 0.19.0 before 0.24.0 contains a decompression bomb vulnerability because the AudioMediaIO multimodal path calls load_audio without the max_duration_s decoded-duration limit. Authenticated attackers can send small compressed audio via input_audio or audio_url in /v1/chat/completions requests that expands to huge decoded PCM, exhausting server memory.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

• BSI CERT-Bund25 Oct 2026WID-SEC-2026-4151

  vllm: Multiple vulnerabilities allow denial of service Translated from German

  CVE-2026-116175CVE-2026-116174CVE-2026-116181

[ References ]References

• github.com/vllm-project/vllm/security/advisories/GHSA-r45p-7qwx-qwjwMitigationVendor Advisory
• www.vulncheck.com/advisories/vllm-0.19.0-before-0.24.0-audio-decompression-bomb-dos-via…Third Party Advisory