{"data":{"id":"34748d31-8306-47e5-9b8e-2bad5ece8277","title":"CVE-2026-69147: vLLM is an inference and serving engine for large language models. Prior to 0.28.0, request bodies for Chat Completions…","summary":"vLLM versions prior to 0.28.0 let Chat Completions and Responses request bodies select the pynvvideocodec video backend through media_io_kwargs.video.video_backend, even when startup configuration chose a software decoder. The engine budgets decoder GPU memory only from static configuration, so the request-selected backend's CUDA context, decoder surfaces and decoded-frame allocations escape the KV-cache budget. An attacker who can submit video requests to a video-capable GPU deployment with PyNvVideoCodec installed can exhaust shared GPU memory, causing request failures, worker crashes or denial of service.","solution":"Fixed in 0.28.0.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-69147","publishedAt":"2026-09-16T18:17:11.770Z","cveId":"CVE-2026-69147","cweIds":["CWE-400","CWE-770"],"cvssScore":"6.5","cvssSeverity":"medium","severity":"medium","attackType":["denial_of_service"],"issueType":"vulnerability","affectedPackages":["vllm@< 0.28.0 (fixed: 0.28.0)"],"affectedPackageNames":["vllm"],"affectedPackageRefs":["pypi:vllm"],"affectedVendors":[],"affectedVendorsRaw":["vLLM","PyNvVideoCodec"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"vLLM GPU memory exhaustion through request-selected video decoder backend","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00583,"epssCheckedAt":"2026-11-04T06:10:13.820Z","kevDateAdded":null,"advisoryAliases":["GHSA-8pw2-6jv3-mj5j"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:43:41.366Z","patchAvailable":true,"disclosureDate":"2026-09-16T18:17:11.770Z","fixReleasedAt":"2026-08-26T10:07:25.091Z","daysToFix":-21,"fixCheckedAt":"2026-10-29T21:30:34.162Z","capecIds":["CAPEC-125","CAPEC-130"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["availability"],"aiComponentTargeted":"inference","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"vllm","fixedVersion":"0.28.0","matchedVersion":"0.28.0","fixReleasedAt":"2026-08-26T10:07:25.091Z","daysToFix":-21,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:30:34.017Z"}]}}