CVE-2026-100650: vLLM Denial of Service Vulnerability Due to Inadequate Media Control Enforcement
Summary
CVE-2026-100650: vLLM through 0.29.0 fetches and fully materializes remote or inline media before enforcing its documented media controls (the VLLM_MAX_AUDIO_CLIP_FILESIZE_MB compressed-audio size cap, default 25 MB, and the per-modality... Affects vllm versions < 0.30.0. Fixed in 0.30.0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
vLLM is an open-source library designed for efficient and scalable language model inference. It provides functionalities for handling various media types, including audio, and is widely used in applications requiring natural language processing. The library's architecture allows for flexible media acquisition, but it has a critical vulnerability that can lead to denial of service due to improper handling of media size limits.
Vulnerability Detail
The vulnerability in vLLM, present in versions up to 0.29.0, arises from its failure to enforce media size limits before fully materializing remote or inline media. Specifically, the library fetches and decodes media without applying the defined limits (VLLM_MAX_AUDIO_CLIP_FILESIZE_MB and per-modality limits) until after the entire media has been processed. This allows a remote attacker to exploit the API server or batch-runner process, leading to excessive memory allocation and bandwidth consumption, ultimately resulting in denial of service. The vulnerability affects multiple ingress paths, including HTTP connections and chat completions, and can be triggered without authentication in certain scenarios.
How To Fix
Latest published version: 0.32.0 as of 22 Oct 2026
pip install --upgrade "vllm==0.32.0"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
0.30.0
This is the first release that contains the fix.
pip install --upgrade "vllm==0.30.0"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you can implement rate limiting on your API endpoints to restrict the number of requests from a single source, thereby reducing the potential impact of this vulnerability. Additionally, consider validating media sizes before processing them, although this may not be a complete solution.
Conclusion
The vLLM package has a significant vulnerability (CVE-2026-100650) that can lead to denial of service due to inadequate enforcement of media size limits. Users are advised to update to version 0.30.0 or later to mitigate this risk. Temporary workarounds can help reduce exposure until the update is applied.
See every vulnerability recorded for vllm →
FAQ
CVE-2026-100650 is a vulnerability in the vLLM package that allows remote attackers to exploit media handling, leading to denial of service.
Versions of vLLM up to 0.29.0 are affected by this vulnerability.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The vulnerability can lead to denial of service by exhausting memory and bandwidth, affecting the performance and availability of applications using vLLM.
No, there is no risk of code execution or data disclosure associated with this vulnerability; it primarily affects service availability.
Related vulnerabilities
Recent vulnerabilities recorded for vllm.
