{"data":{"id":"369bd9ab-3f80-4f04-b31b-817985b8bb49","title":"CVE-2026-126394: vLLM 0.30.0 before 0.31.0 contains a resource exhaustion vulnerability in OpenCVDynamicOpenPanguVideoBackend, which…","summary":"vLLM 0.30.0 before 0.31.0 has a resource exhaustion flaw in OpenCVDynamicOpenPanguVideoBackend, which uses the request-controlled num_frames value without an effective ceiling. An unauthenticated attacker can send a request to /v1/chat/completions or /tokenize that selects the openpangu video_backend with a very large num_frames, forcing np.linspace allocations and CPU work that OOM-kill the API server.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-126394","publishedAt":"2026-11-13T10:17:43.383Z","cveId":"CVE-2026-126394","cweIds":["CWE-770"],"cvssScore":"5.3","cvssSeverity":"medium","severity":"medium","attackType":["denial_of_service"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["vLLM"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"vLLM resource exhaustion in OpenCVDynamicOpenPanguVideoBackend via num_frames","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00437,"epssCheckedAt":"2026-11-13T18:11:31.368Z","kevDateAdded":null,"advisoryAliases":["GHSA-cj94-896r-fxx6"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-13T18:11:36.307Z","patchAvailable":null,"disclosureDate":"2026-11-13T10:17:43.383Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-130"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["availability"],"aiComponentTargeted":"inference","llmSpecific":true,"classifierConfidence":0.93,"researchCategory":null,"atlasIds":null,"fixes":[]}}