{"data":{"id":"32940c6b-747b-4698-bb9e-045300a9bcee","title":"CVE-2026-126397: vLLM from 0.10.1 before 0.31.0 forwards a request-controlled mm_processor_kwargs.max_patches value to the Hugging Face…","summary":"vLLM versions from 0.10.1 before 0.31.0 pass a request-controlled mm_processor_kwargs.max_patches value to the Hugging Face processor for Cohere2 Vision models without a server-side upper bound. Large, varying max_patches values cause quadratic CPU work during multimodal preprocessing and bypass the LRU cache. Remote clients can send small image chat-completion requests to exhaust preprocessing workers and deny service to other clients.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-126397","publishedAt":"2026-11-13T10:17:43.923Z","cveId":"CVE-2026-126397","cweIds":["CWE-400"],"cvssScore":"7.5","cvssSeverity":"high","severity":"high","attackType":["denial_of_service"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["vLLM","Cohere2 Vision"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"vLLM denial of service via unbounded max_patches in multimodal preprocessing","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00655,"epssCheckedAt":"2026-11-13T18:11:31.378Z","kevDateAdded":null,"advisoryAliases":["GHSA-h8w4-vgpr-474w"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-13T18:11:35.143Z","patchAvailable":null,"disclosureDate":"2026-11-13T10:17:43.923Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-125","CAPEC-130"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["availability"],"aiComponentTargeted":"inference","llmSpecific":false,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null,"fixes":[]}}