{"data":{"id":"2a521f45-b620-4e96-8cda-d15c9d628b3e","title":"CVE-2026-90555: vLLM versions before 0.28.0 fail to validate audio sample rate headers in the transcription endpoint, allowing…","summary":"vLLM versions before 0.28.0 fail to validate audio sample rate headers in the transcription endpoint, letting authenticated clients bypass duration checks. An attacker can submit forged FLAC headers with inflated sample rates to trigger excessive memory allocation and crash the API server process, affecting all tenants.","solution":"Fixed in 0.28.0.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-90555","publishedAt":"2026-09-12T13:16:54.180Z","cveId":"CVE-2026-90555","cweIds":["CWE-409"],"cvssScore":"6.5","cvssSeverity":"medium","severity":"medium","attackType":["denial_of_service"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["vLLM"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"vLLM audio sample rate validation flaw in transcription endpoint","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.0052,"epssCheckedAt":"2026-11-05T00:11:43.030Z","kevDateAdded":null,"advisoryAliases":["GHSA-mpw6-hvj8-87hq"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-01T06:08:35.872Z","patchAvailable":null,"disclosureDate":"2026-09-12T13:16:54.180Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["availability"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}