What happened
NVD published this CVSS 6.5 Medium vulnerability on Sept 16, 2026, part of a recurring pattern of missing resource limits in vLLM's multimodal (audio/video) input-handling paths.
Why it matters
vLLM is one of the most widely deployed open-source LLM inference engines; missing resource caps on multimodal input processing let any client degrade or crash a shared multi-tenant inference server, denying service to all co-hosted users/models.
Attack vector
The input_audio handling path calls AudioMediaIO.load_bytes/load_file without passing the configured VLLM_MAX_AUDIO_DECODE_DURATION_S limit to the shared audio decoder, letting an unauthenticated client submit an oversized audio payload that consumes excessive decode resources on the shared inference server.
Affected systems
vLLM < 0.24.0
Mitigation
Upgrade to vLLM >= 0.24.0, which threads the duration limit through to the audio decoder.