CVE-2026-116179

The vLLM library, versions 0.18.0 before 0.31.0 , is susceptible to a memory exhaustion vulnerability. An attacker can bypass the video/jpeg frame-count cap by overriding the num_frames parameter through media_io_kwargs. By setting num_frames to -1 while providing a large inline video, the VideoM...