SB2026090133 - Multiple vulnerabilities in vLLM

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2026090133

SB2026090133 - Multiple vulnerabilities in vLLM

Published: September 1, 2026

Security Bulletin ID SB2026090133
CSH Severity
High
Patch available
YES
Number of vulnerabilities 4
Exploitation vector Remote access
Highest impact Code execution

Breakdown by Severity

High 25% Low 75%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 4 vulnerabilities.


1) Inclusion of Functionality from Untrusted Control Sphere (CVE-ID: N/A)

CWE-ID: CWE-829 - Inclusion of Functionality from Untrusted Control Sphere

CVSSv4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to execute arbitrary code.

The vulnerability exists due to inclusion of functionality from an untrusted control sphere in the LlavaOnevision2 processor loader _load_ov2_processor when loading a crafted LlavaOnevision2 model. A remote attacker can supply malicious processor modules that are imported and executed to execute arbitrary code.

User interaction is required to load or serve the crafted model, and code runs with the authority of the vLLM process.


2) Resource exhaustion (CVE-ID: N/A)

CWE-ID: CWE-400 - Resource exhaustion

CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to cause a denial of service.

The vulnerability exists due to uncontrolled resource consumption in load_audio_pyav in nano_nemotron_vl.py when processing crafted video input for audio extraction. A remote attacker can supply a small compressed video file to trigger excessive memory allocation and cause a denial of service.

Exploitation is reachable through LLM.generate() with multi_modal_data when using NanoNemotronVL models with use_audio_in_video enabled and no separate audio file.


3) Reliance on Untrusted Inputs in a Security Decision (CVE-ID: N/A)

CWE-ID: CWE-807 - Reliance on Untrusted Inputs in a Security Decision

CVSSv4: 7.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote user to cause a denial of service.

The vulnerability exists due to reliance on untrusted inputs in a security decision in the /v1/audio/transcriptions audio decoding path when processing a crafted audio file with a forged header sample rate. A remote user can submit a specially crafted FLAC file to cause a denial of service.

Exploitation requires a valid API key and a transcription-capable model with the /v1/audio/* endpoint mounted.


4) Resource exhaustion (CVE-ID: CVE-2026-69147)

CWE-ID: CWE-400 - Resource exhaustion

CVSSv4: 7.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote user to cause a denial of service.

The vulnerability exists due to uncontrolled resource consumption in the video decoding path when processing video requests with a request-selected PyNvVideoCodec backend. A remote user can send a specially crafted video request to cause a denial of service.

Exploitation requires a GPU deployment where PyNvVideoCodec is installed and usable, and the request must reach a video-capable model or path.


Remediation

Install update from vendor's website.

References