{"data":{"id":"34748d31-8306-47e5-9b8e-2bad5ece8277","title":"CVE-2026-69147: vLLM is an inference and serving engine for large language models. Prior to 0.28.0, request bodies for Chat Completions ","summary":"vLLM, a system that runs large language models, had a vulnerability before version 0.28.0 where attackers could request video processing using a specific decoder (PyNvVideoCodec) that wasn't properly accounted for in GPU memory budgets. This could cause the shared GPU memory to fill up, leading to crashed requests, crashed worker processes, or denial of service (making the system unavailable).","solution":"Update vLLM to version 0.28.0 or later, which contains the fix for this vulnerability.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-69147","publishedAt":"2026-09-16T18:17:11.770Z","cveId":"CVE-2026-69147","cweIds":["CWE-400","CWE-770"],"cvssScore":"6.5","cvssSeverity":"medium","severity":"medium","attackType":["denial_of_service"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":["LangChain"],"affectedVendorsRaw":["vLLM"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0,"patchAvailable":null,"disclosureDate":"2026-09-16T18:17:11.770Z","capecIds":["CAPEC-125","CAPEC-130"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["availability"],"aiComponentTargeted":"inference","llmSpecific":true,"classifierConfidence":0.92,"researchCategory":null,"atlasIds":null}}