CVE-2026-116177 - vLLM 0.10.2 before 0.25.0 DoS via Nemotron-VL Processor Decompression-Bomb Guard Bypass
CVE ID :CVE-2026-116177 Published : Oct. 25, 2026, 2:16 p.m. | 2 hours, 5 minutes ago Description :vLLM from 0.10.2 before 0.25.0 contains an uncontrolled resource consumption vulnerability that allows unauthenticated attackers to exhaust memory because the Nemotron-VL processors globally set...