CVE-2026-90554

vLLM versions >=0.10.2 and <0.28.0 do not apply any audio decode-size or duration limit when extracting audio from video input for NanoNemotronVL models. In nano_nemotron_vl.py, _extract_audio_from_videos calls load_audio_pyav(BytesIO(video_bytes)) without the max_duration_s or max_decode_bytes parameters, so neither VLLM_MAX_AUDIO_DECODE_DURATION_S nor VLLM_MAX_AUDIO_DECODE_BYTES is enforced (unlike the direct audio upload path in AudioMediaIO). When a NanoNemotronVL model is served with use_audio_in_video=True, an attacker who supplies a small, highly compressed video as multimodal input can force the server to allocate gigabytes of memory during audio decoding, resulting in a denial of service. Fixed in vLLM 0.28.0.

• CWE-400

• https://github.com/vllm-project/vllm/security/advisories/GHSA-936p-m5pv-vvjf
• https://www.vulncheck.com/advisories/vllm-before-0.28.0-denial-of-service-via-audio-extraction

Published

Sep 12, 2026

Last Modified

Sep 12, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-90549WWBN AVideo through commit c3edcc274c389816d434acadac07ee78e…5.3
• CVE-2026-9055The Booking for Appointments and Events Calendar – Amelia (P…9.8
• CVE-2026-90550WWBN AVideo through commit c3edcc274c389816d434acadac07ee78e…5.3
• CVE-2026-90551WWBN AVideo through commit c3edcc274c389816d434acadac07ee78e…5.3
• CVE-2026-90552WWBN AVideo through commit c3edcc274c389816d434acadac07ee78e…4.3
• CVE-2026-90553vLLM before 0.28.0 contains a remote code execution vulnerab…7.8
• CVE-2026-90555vLLM versions before 0.28.0 fail to validate audio sample ra…6.5
• CVE-2026-90556Freeciv versions before 3.2.6 contain a heap buffer overflow…7.8
• CVE-2026-90557Freeciv versions 3.1.0 through 3.2.5 contain an out-of-bound…6.1
• CVE-2026-90558sngrep through 1.8.4 contains stack buffer overflow vulnerab…9.8
• CVE-2026-90559snappy-java through 1.1.10.8 contains an out-of-bounds write…7.5
• CVE-2026-9056A stored cross-site scripting vulnerability has been found i…5.4