CVE-2026-116179

A flaw was found in vLLM. A remote attacker can cause a Denial of Service DoS by sending a specially crafted request containing an inline video that bypasses frame-count limits. By overriding media decoding parameters, the attacker forces the service to decode every frame of an oversized video...