CVE-2026-100648 vllm before 0.29.0 Uncontrolled Resource Consumption via Audio Decoding
Attackers can cause denial of service by submitting oversized audio files to bypass size limits and exhaust system resources.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-100648?
CVE-2026-100648 is a medium-severity denial of service vulnerability in Vllm Vllm, published on 26 Sep 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
vllm before 0.29.0 fails to enforce VLLM_MAX_AUDIO_CLIP_FILESIZE_MB limit in multimodal chat audio decoding, allowing unauthenticated clients to bypass file size restrictions. Attackers can submit oversized audio files through chat endpoints to consume excessive memory and CPU resources during decoding.
Weakness: CWE-400
Which versions are affected by CVE-2026-100648?
It affects 1 product.
Products include Vllm Vllm.
How do I fix CVE-2026-100648?
Upgrade to a fixed version.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2026-100648 being exploited?
There is no known exploitation of CVE-2026-100648 in the wild and no public exploit code.
Other vulnerabilities in Vllm Vllm
- CVE-2025-32444 vLLM Vulnerable to Remote Code Execution via Mooncake Integration
- CVE-2026-22778 vLLM leaks a heap address when PIL throws an error
- CVE-2025-47277 vLLM Allows Remote Code Execution via PyNcclPipe Communication Service
- CVE-2024-11041 Remote Code Execution in vllm-project/vllm
- CVE-2026-48746 vLLM: OpenAI auth bypass
Sources
Also known as GHSA-526f-298v-f597, GHSA-jcq2-4gch-5qhf, MINI-6wf9-8hgc-jq97, MINI-w7wp-fvhx-fhcg, MINI-x54w-6cgq-hhxr.