CVE-2026-57173: vLLM is an inference and serving engine for large language models. Prior to 0.24.0, the input_audio handling path for /v

vLLM (a system for running large language models) had a security flaw in versions before 0.24.0 where audio files sent to the chat endpoint could bypass safety limits designed to prevent memory overload. An attacker could submit a small compressed audio file that expands into massive data, crashing the system, without needing to log in first.