CVE-2026-55646: vLLM audio transcription routes allow memory exhaustion via oversized uploads

Summary

From vLLM 0.22.0 to 0.23.0, the /v1/audio/transcriptions and /v1/audio/translations routes call request.file.read() and fully load an uploaded audio file into memory before the VLLM_MAX_AUDIO_CLIP_FILESIZE_MB size limit (default 25 MB) is checked during speech-to-text preprocessing. An API caller who can reach these routes can submit an oversized multipart upload, causing memory allocation proportional to the file size before rejection, which can create memory pressure or terminate the process depending on deployment resource limits.

Mitigation

This issue is fixed in version 0.24.0.

Affected packages in the Exposure Registry

Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.

• vllmPyPILLM dependency since 2023-08-25 · 15 tracked dependents

Topics

• Inference infrastructure

Related items

• MediumCVE-2026-109311: vLLM audio upload heap overflow via FFmpeg IAMF parserSimilar attack · NVD/CVE Database
• MediumCVE-2026-108748: Quarkus LangChain4j memory exhaustion in chat-scopes WebSocketSimilar attack · NVD/CVE Database
• HighHermes Agent - Pre-Authentication Disk ConsumptionSimilar attack · Tenable Research Advisories
• MediumHermes Agent - Pre-Authentication Memory ExhaustionSimilar attack · Tenable Research Advisories
• MediumGHSA-v36g-jcw9-x7cw: Pydantic AI: Excessive resource use when local web fetching converts nested HTMLSimilar attack · GitHub Advisory Database