UpHeron
All vulnerabilities

Servers and applications

CVE-2026-116177

vLLM 0.10.2 before 0.25.0 DoS via Nemotron-VL Processor Decompression-Bomb Guard Bypass

Severity
High 8.7
Published
25 Oct 2026
Last changed
29 Oct 2026
Added to UpHeron
3 Nov 2026
Fixed in
0.25.0
Sources
NVD, CVE Program

Description

vLLM from 0.10.2 before 0.25.0 contains an uncontrolled resource consumption vulnerability that allows unauthenticated attackers to exhaust memory because the Nemotron-VL processors globally set Image.MAX_IMAGE_PIXELS to None. Attackers can submit a pathological decompression-bomb image to /v1/chat/completions to OOM-kill the worker and deny service to co-tenants.

Affected software

SoftwareAffected versions
vLLMServers and applications · cna:vllm-project|vllm
  • From 0.10.2 before 0.25.0
vLLMServers and applications · cpe:a:vllm:vllm
  • From 0.10.2 before 0.25.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2026-116177
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-116177