Skip to content
Threat Feed
Subscribe

Product

VLLM (0.8.5 <= Version < 0.31.0)

1 brief RSS
low advisory

vLLM: Uncontrolled resource consumption via image processing (CVE-2026-116177)

An unauthenticated denial of service vulnerability in vLLM versions 0.10.2 through 0.24.x allows attackers to trigger an out-of-memory condition by submitting decompression-bomb images to the /v1/chat/completions endpoint.

vLLM +1 denial-of-service vulnerability webserver
1t 2c