CVE-2026-90554 vLLM before 0.28.0 Denial of Service via audio extraction
Attackers can cause denial of service by sending compressed video inputs to vLLM servers configured for audio extraction, forcing excessive memory allocation.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-90554?
CVE-2026-90554 is a medium-severity denial of service vulnerability in Vllm Vllm, published on 12 Sep 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
vLLM versions >=0.10.2 and <0.28.0 do not apply any audio decode-size or duration limit when extracting audio from video input for NanoNemotronVL models. In nano_nemotron_vl.py, _extract_audio_from_videos calls load_audio_pyav(BytesIO(video_bytes)) without the max_duration_s or max_decode_bytes parameters, so neither VLLM_MAX_AUDIO_DECODE_DURATION_S nor VLLM_MAX_AUDIO_DECODE_BYTES is enforced (unlike the direct audio upload path in AudioMediaIO). When a NanoNemotronVL model is served with use_audio_in_video=True, an attacker who supplies a small, highly compressed video as multimodal input can force the server to allocate gigabytes of memory during audio decoding, resulting in a denial of service. Fixed in vLLM 0.28.0.
Weakness: CWE-400
Which versions are affected by CVE-2026-90554?
It affects 1 product.
Products include Vllm Vllm.
How do I fix CVE-2026-90554?
Upgrade to a fixed version.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2026-90554 being exploited?
There is no known exploitation of CVE-2026-90554 in the wild and no public exploit code.
Other vulnerabilities in Vllm Vllm
- CVE-2025-32444 vLLM Vulnerable to Remote Code Execution via Mooncake Integration
- CVE-2026-22778 vLLM leaks a heap address when PIL throws an error
- CVE-2025-47277 vLLM Allows Remote Code Execution via PyNcclPipe Communication Service
- CVE-2024-11041 Remote Code Execution in vllm-project/vllm
- CVE-2026-48746 vLLM: OpenAI auth bypass
Sources
Also known as GHSA-936p-m5pv-vvjf, GHSA-m39m-2pqx-3vm2, MINI-96jv-wj5w-r4mr, MINI-pgrg-j7m3-7mrr, MINI-vmwx-cvrr-v6cv.