CVE-2026-116179 - vLLM 0.18.0 before 0.31.0 Memory Exhaustion via media_io_kwargs num_frames Override
CVE ID :CVE-2026-116179 Published : Oct. 25, 2026, 2:16 p.m. | 2 hours, 5 minutes ago Description :vLLM from 0.18.0 before 0.31.0 contains a resource exhaustion vulnerability that allows API clients to bypass the video/jpeg frame-count cap by overriding num_frames through media_io_kwargs....