{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/vllm-0.8.5--version--0.31.0/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:vllm:vllm:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.5,"id":"CVE-2026-116177"},{"cvss":7.7,"id":"CVE-2026-116180"},{"cvss":7.5,"id":"CVE-2026-114055"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["vLLM (0.10.2 \u003c= version \u003c 0.25.0)","vLLM (0.8.5 \u003c= version \u003c 0.31.0)","vllm (\u003e= 0.7.3, \u003c 0.31.0)"],"_cs_severities":["low"],"_cs_tags":["denial-of-service","vulnerability","webserver"],"_cs_type":"advisory","_cs_vendors":["vLLM"],"content_html":"\u003cp\u003evLLM versions 0.10.2 through 0.24.x are vulnerable to uncontrolled resource consumption (CVE-2026-116177). The vulnerability originates in the Nemotron-VL processor configuration, which sets the Pillow library attribute Image.MAX_IMAGE_PIXELS to None. This removes the default safety limit for image processing, allowing an unauthenticated attacker to supply a large, malicious image file to the /v1/chat/completions API endpoint, leading to process memory exhaustion and service denial.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation results in an OOM (out-of-memory) kill of the vLLM worker process, causing a denial of service for all users of the affected worker instance.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade vLLM to version 0.25.0 or later immediately to restore image pixel limits.\u003c/li\u003e\n\u003cli\u003eAudit network access to the /v1/chat/completions endpoint to restrict exposure to trusted clients where possible.\u003c/li\u003e\n\u003cli\u003eConfigure resource limits (cgroups or container-level memory limits) for vLLM workers to mitigate the impact of OOM events.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-25T16:07:32Z","date_published":"2026-10-25T14:32:24Z","id":"https://feed.craftedsignal.io/briefs/2026-10-vllm-resource-exhaustion/","summary":"An unauthenticated denial of service vulnerability in vLLM versions 0.10.2 through 0.24.x allows attackers to trigger an out-of-memory condition by submitting decompression-bomb images to the /v1/chat/completions endpoint.","title":"vLLM: Uncontrolled resource consumption via image processing (CVE-2026-116177)","url":"https://feed.craftedsignal.io/briefs/2026-10-vllm-resource-exhaustion/"}],"language":"en","title":"CraftedSignal Threat Feed - VLLM (0.8.5 \u003c= Version \u003c 0.31.0)","version":"https://jsonfeed.org/version/1.1"}