CVE-2026-116179

vLLM 0.18.0 before 0.31.0 Memory Exhaustion via media_io_kwargs num_frames Override

Published Oct 25, 2026 CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Description

vLLM from 0.18.0 before 0.31.0 contains a resource exhaustion vulnerability that allows API clients to bypass the video/jpeg frame-count cap by overriding num_frames through media_io_kwargs. Attackers can set num_frames to -1 with a large inline video so VideoMediaIO.load_base64 decodes every frame, exhausting memory and crashing the API frontend.

Analysis

Technical impact

vLLM versions 0.18.0 through 0.30.x contain a resource exhaustion flaw caused by the ability of API clients to override the num_frames parameter through media_io_kwargs. By setting num_frames to –1 and supplying a large inline video, VideoMediaIO.load_base64 processes every frame, consuming excessive memory and causing the API to crash. The flaw is a classic example of a Denial of Resource condition, classified as CWE-770, and results in a denial of service that can affect availability for any user of the impacted API endpoint.

Affected Systems

The vulnerability affects the vLLM project’s vLLM library. All releases from 0.18.0 up to and including 0.30.x are impacted; the issue is resolved in 0.31.0 and newer releases. Affected vendors include the vllm-project.

Risk and Exploitability

The base CVSS score is 8.7, indicating a high severity. EPSS data is not available, and the vulnerability is not listed in the CISA KEV catalog. Attackers can exploit the flaw by sending crafted requests to the vLLM API, where the overridden num_frames causes the server to drain memory. The attack vector is therefore an API client with the ability to control media_io_kwargs payloads, typically over a network connection. Because it does not require elevated privileges or prior authentication, the vulnerability can lead to a service outage for the exposed endpoint.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

vllm-project

vllm

unaffected

Version	Status	Constraints
`0.18.0`	affected	< 0.31.0
`0.31.0`	unaffected	—

Configuration 1 [-]

cpe:2.3:a:vllm:vllm:*:*:*:*:*:*:*:*

No data.

Vendor Product Versions

Vllm

Version	Status	Scheme	Platform
`[0.18.0,0.31.0)`	affected	semver	—
`0.31.0`	unaffected	semver	—

Vllm-project

Vllm

Version	Status	Scheme	Platform
`[0.18.0,0.31.0)`	affected	semver	—
`0.31.0`	unaffected	semver	—

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Upgrade to vLLM 0.31.0 or later to eliminate the memory‑exhaustion flaw.
If an upgrade is not immediately possible, enforce strict limits on media_io_kwargs, disallow negative or excessively large num_frames values, and implement request size or frame‑count checks on the API side.
Apply application‑level memory or resource quotas and monitor memory usage to detect and mitigate potential exhaustion attempts.

Generated by OpenCVE AI on October 25, 2026 at 16:38 UTC.

Tracking

Advisories

No advisories available

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact None

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.321% probability within 30 days)

Exploitation none

Automatable yes

Technical Impact partial

References

Link	Providers
https://github.com/vllm-project/vllm/security/advisories/GHSA-4m6g-h9mv-wqjc
https://nvd.nist.gov/vuln/detail/CVE-2026-116179
https://www.cve.org/CVERecord?id=CVE-2026-116179
https://www.vulncheck.com/advisories/vllm-0.18.0-before-0.31.0-memory-exhaustion-via-media-io-kwargs-num-frames-override

History

Oct 26, 2026 5:30 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Oct 26, 2026 12:30 AM Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
References		https://nvd.nist.gov/vuln/detail/CVE-2026-116179 https://www.cve.org/CVERecord?id=CVE-2026-116179
Metrics	threat_severity `None`	threat_severity `Important`

Oct 25, 2026 8:30 PM First appearance in the feed. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Vllm-project Vllm-project vllm
Vendors & Products		Vllm-project Vllm-project vllm

Oct 25, 2026 1:45 PM Description updated. Title updated. First appearance in the feed. Weaknesses updated. Affected versions updated. Affected vendors updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		vLLM from 0.18.0 before 0.31.0 contains a resource exhaustion vulnerability that allows API clients to bypass the video/jpeg frame-count cap by overriding num_frames through media_io_kwargs. Attackers can set num_frames to -1 with a large inline video so VideoMediaIO.load_base64 decodes every frame, exhausting memory and crashing the API frontend.
Title		vLLM 0.18.0 before 0.31.0 Memory Exhaustion via media_io_kwargs num_frames Override
First Time appeared		Vllm Vllm vllm
Weaknesses		CWE-770
CPEs		cpe:2.3:a:vllm:vllm::::::::
Vendors & Products		Vllm Vllm vllm
References		https://github.com/vllm-project/vllm/security/advisories/GHSA-4m6g-h9mv-wqjc https://www.vulncheck.com/advisories/vllm-0.18.0-before-0.31.0-memory-exhaustion-via-media-io-kwargs-num-frames-override
Metrics		cvssV3_1 `{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}` cvssV4_0 `{'score': 8.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N'}`