vLLM DoS via unvalidated multimodal processor arguments

vLLM forwards unvalidated mm_processor_kwargs from API clients to image processors, allowing remote attackers to cause denial of service by controlling resource-sensitive parameters like image size that trigger out-of-memory conditions.

Disclosed 23 October 2026 · Record updated 23 October 2026

Impact

Remote attackers can exhaust CPU or GPU memory and terminate shared service processes, affecting all users of the affected service instance. vLLM's optional API key means deployments without external authentication are remotely exploitable.

Our coverage

A single malformed package crashes through a server's defenses, flooding its chambers with endless data until the entire machine grinds to a halt, choking on its own overflow.

Vulnerabilities

One request can crash a vLLM server, advisory warns

A flaw tracked as CVE-2026-114055 lets API clients pass unchecked image-processing settings to vLLM, exhausting memory and taking down shared instances.

23 Oct 2026

Sources

github.comhttps://github.com/advisories/GHSA-gx7p-2j49-hfq4