VLLM (0.10.2 <= Version < 0.25.0) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/vllm-0.10.2--version--0.25.0/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioSun, 25 Oct 2026 14:32:24 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgvLLM: Uncontrolled resource consumption via image processing (CVE-2026-116177)https://feed.craftedsignal.io/briefs/2026-10-vllm-resource-exhaustion/Sun, 25 Oct 2026 14:32:24 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-vllm-resource-exhaustion/An unauthenticated denial of service vulnerability in vLLM versions 0.10.2 through 0.24.x allows attackers to trigger an out-of-memory condition by submitting decompression-bomb images to the /v1/chat/completions endpoint.vLLM versions 0.10.2 through 0.24.x are vulnerable to uncontrolled resource consumption (CVE-2026-116177). The vulnerability originates in the Nemotron-VL processor configuration, which sets the Pillow library attribute Image.MAX_IMAGE_PIXELS to None. This removes the default safety limit for image processing, allowing an unauthenticated attacker to supply a large, malicious image file to the /v1/chat/completions API endpoint, leading to process memory exhaustion and service denial.

Impact

Successful exploitation results in an OOM (out-of-memory) kill of the vLLM worker process, causing a denial of service for all users of the affected worker instance.

Recommendation

  • Upgrade vLLM to version 0.25.0 or later immediately to restore image pixel limits.
  • Audit network access to the /v1/chat/completions endpoint to restrict exposure to trusted clients where possible.
  • Configure resource limits (cgroups or container-level memory limits) for vLLM workers to mitigate the impact of OOM events.
]]>lowadvisorydenial-of-servicevulnerabilitywebserver