CVE-2026-100650: vLLM media fetching exhausts memory and bandwidth before size limits apply

Summary

vLLM through 0.29.0 fetches and fully reads remote or inline media before enforcing its documented media controls, the VLLM_MAX_AUDIO_CLIP_FILESIZE_MB audio size cap and the --limit-mm-per-prompt item limits. Across four ingress paths, including the chat completions audio_url and base64 path and the unauthenticated Rust frontend POST /tokenize route, a remote attacker can force memory and outbound bandwidth use proportional to an attacker-chosen body size or media item count before rejection. The result is pre-inference memory and bandwidth exhaustion, a denial of service. The source states no code execution or data disclosure impact.

Mitigation

The source does not state a fix yet. Check the original advisory for updates.

Topics

• Inference infrastructure

Related items

• MediumEndor Labs’ AI SAST Finds Zero Day Memory-Amplification DoS in Anthropic’s buffa library | Endor LabsSimilar attack · Endor Labs Blog
• MediumCVE-2026-44627: Intel oneDNN integer overflow to buffer overflow in Ring 3 user applicationsSimilar attack · NVD/CVE Database
• MediumGHSA-h7c4-q426-7jh9: tsParticles: A single anonymous MCP session can monopolize HTTP mode and deny new clientsSimilar attack · GitHub Advisory Database
• HighGHSA-4p8p-pjpq-2w7h: tsParticles: Malformed JSON requests can terminate the @tsparticles/mcp-server HTTP processSimilar attack · GitHub Advisory Database
• HighGHSA-447x-qqwf-m7xq: tsParticles: Unbounded HTTP Request Body Buffering in @tsparticles/mcp-server Leads to Remote DoSSimilar attack · GitHub Advisory Database