GHSA-58v5-2m8f-94pr: vLLM: GLMGA video sampling permits request-driven CPU and memory exhaustion
Summary
vLLM's video chat endpoint accepts user-controlled video sampling options that can cause denial of service (a situation where legitimate requests are slowed or blocked). An attacker can send a tiny video file with extremely high `fps` (frames per second) and `max_frames` values, forcing the server to create and process a huge temporary list during sampling, which wastes CPU and memory even though the actual video has only a few frames.
Solution / Mitigation
Validate request-level video sampling options before dispatching work to the media executor. Enforce conservative absolute limits for `fps`, `max_frames`, and especially the computed candidate count.
Vulnerability Details
EPSS: 0.0%
Yes
October 5, 2026
Classification
Affected Vendors
Affected Packages
Related Issues
CVE-2026-63086: text-generation-inference through 3.3.7 contains a server-side request forgery (SSRF) vulnerability in the OpenAI-compat
CVE-2024-37052: Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.1.0 or newer, enabling
Original source: https://github.com/advisories/GHSA-58v5-2m8f-94pr
First tracked: October 5, 2026 at 08:00 PM
Classified by LLM (prompt v3) · confidence: 95%