Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: vllm-project vLLM 0.28.0 Clear all filters
TI-2026-61569 CVE-2026-90555 · GHSA-mpw6-hvj8-87hq

vLLM before 0.28.0 Denial of Service via Audio Header

Priority LOW 32

vLLM versions before 0.28.0 fail to validate audio sample rate headers in the transcription endpoint, allowing authenticated clients to bypass duration checks.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.0052 Published 2026-09-12 Partial fix · 0.28.0 CWE-409
TI-2026-61568 CVE-2026-90554 · GHSA-m39m-2pqx-3vm2

vLLM before 0.28.0 Denial of Service via audio extraction

Priority LOW 30

vLLM versions >=0.10.2 and <0.28.0 do not apply any audio decode-size or duration limit when extracting audio from video input for NanoNemotronVL models.

CVSS 4.0MEDIUM 6.9 Local No auth No interaction EPSS 0.00201 Published 2026-09-12 Partial fix · 0.28.0 CWE-400
TI-2026-61567 CVE-2026-90553 · GHSA-rp86-qf3f-pqfc

vLLM before 0.28.0 Remote Code Execution via LlavaOnevision2 processor

Priority LOW 39

vLLM before 0.28.0 contains a remote code execution vulnerability in the LlavaOnevision2 processor loader that ignores the trust_remote_code parameter when loading remote processor classes.

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.00308 Published 2026-09-12 Partial fix · 0.28.0 CWE-94