vLLM: clients can override the video frame cap via media_io_kwargs and exhaust API frontend memory

Impact

The per-request media_io_kwargs field lets a caller set num_frames, overriding the server's frame-count cap. With num_frames=-1 and a large inline video, VideoMediaIO.load_base64 decodes every frame into memory and the API frontend dies. That takes out the process handling all requests for the replica, not just the offending one, so co-tenants on a shared inference endpoint lose service and the GPU workers behind it sit idle until the frontend is back. Distinct from the Nemotron-VL image-bomb issue (CVE-2026-116177): different code path, different affected range, different fix.

Who can reach it

Any API client able to POST a multimodal request to the vLLM frontend; the advisory describes no authentication requirement.

What to do

Upgrade vLLM to 0.31.0 or later and restart the API frontend and workers. As an interim mitigation, strip or reject media_io_kwargs at the gateway in front of vLLM and cap request body size.

References

Related entries

• llama.cpp rpc-server: oversized RPC message length aborts the process, denying service to all clientsCVE-2026-119052 · llama.cpp ggml-rpc server (rpc-server message length handling)High
• Crawl4AI Docker API: unbounded delay fields let an unauthenticated client exhaust the crawler page poolCVE-2026-119119 · Crawl4AI Docker API server (_clamp_untrusted delay fields)High
• n8n: deprecated code nodes execute JavaScript in the main process, outside task-runner isolationCVE-2026-119408 · n8n (deprecated Function, Function Item and LangChain Code nodes)High
• KubeAI (Ollama engine controller): Injection in `ollamaStartupProbeScript()`CVE-2026-34940 · KubeAI (Ollama engine controller)High
• Flowise: public chatflow endpoints return raw flowData including plaintext API keysCVE-2026-41278 · Flowise (GET /api/v1/public-chatflows/:id and public-chatbotConfig response sanitization)High
• Nocturne Memory: empty API_TOKEN disables auth, exposing the agent knowledge graph to the LANCVE-2026-44830 · Nocturne Memory (BearerTokenAuthMiddleware when API_TOKEN is unset)High