CVE-2026-73560: vLLM is an inference and serving engine for large language models. Prior to 0.26.0, the MiMoV2OmniMultiModalProcessor in

vLLM, a system that runs large language models, has a security vulnerability before version 0.26.0 where the MiMoV2OmniMultiModalProcessor component improperly handles image and audio inputs by bypassing security checks (allowed_media_domains and allowed_local_media_path, which are supposed to restrict what files and websites the system can access). This flaw allows an attacker to trick the server into making requests or reading files that shouldn't be accessible.