7.5Hoch
CVE-2026-116177vLLM 0.10.2 before 0.25.0 DoS via Nemotron-VL Processor Decompression-Bomb Guard Bypass
Beschreibung
vLLM from 0.10.2 before 0.25.0 contains an uncontrolled resource consumption vulnerability that allows unauthenticated attackers to exhaust memory because the Nemotron-VL processors globally set Image.MAX_IMAGE_PIXELS to None. Attackers can submit a pathological decompression-bomb image to /v1/chat/completions to OOM-kill the worker and deny service to co-tenants.
Schwachstellentyp (CWE):
CWE-400
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| vllm-project | vllm | 0.10.2 – < 0.25.0, fixed 0.25.0 |
Referenzen und Patches
- GitHub Security Advisory (GHSA-mm38-5g96-7j6x) vendor-advisoryPatchVendor Advisory
- VulnCheck Advisory: vLLM 0.10.2 before 0.25.0 DoS via Nemotron-VL Processor Decompression-Bomb Guard Bypass third-party-advisoryThird Party Advisory
CPE-Treffer (NVD) (1)
cpe:2.3:a:vllm:vllm:*:*:*:*:*:*:*:*≥ 0.10.2 < 0.25.0