EUVD-2026-109436

vLLM from 0.19.0 before 0.24.0 contains a decompression bomb vulnerability because the AudioMediaIO multimodal path calls loadaudio without the maxdurations decoded-duration limit. Authenticated attackers can send small compressed audio via inputaudio or audiourl in /v1/chat/completions requests...

CVE-2026-109226

SGLang versions through 0.5.21 are vulnerable to a decompression amplification vulnerability within the load_audio function. This flaw allows remote attackers to trigger a denial of service (DoS) by submitting highly compressed, small FLAC-encoded silence files via audio_url or audio_data inputs....

CVE-2026-109226 SGLang through 0.5.21 Audio Decompression Amplification via load_audio

SGLang through 0.5.21 contains a decompression amplification vulnerability in loadaudio that allows remote attackers to exhaust memory by submitting highly compressed audio decoded without duration or sample limits. Attackers can supply small FLAC-encoded silence files through audiourl or audioda...

CVE-2026-109226 SGLang through 0.5.21 Audio Decompression Amplification via load_audio

SGLang through 0.5.21 contains a decompression amplification vulnerability in loadaudio that allows remote attackers to exhaust memory by submitting highly compressed audio decoded without duration or sample limits. Attackers can supply small FLAC-encoded silence files through audiourl or audioda...

EUVD-2026-97432

SGLang through 0.5.21 contains a decompression amplification vulnerability in loadaudio that allows remote attackers to exhaust memory by submitting highly compressed audio decoded without duration or sample limits. Attackers can supply small FLAC-encoded silence files through audiourl or audioda...

CVE-2026-109226 SGLang through 0.5.21 Audio Decompression Amplification via load_audio

SGLang through 0.5.21 contains a decompression amplification vulnerability in loadaudio that allows remote attackers to exhaust memory by submitting highly compressed audio decoded without duration or sample limits. Attackers can supply small FLAC-encoded silence files through audiourl or audioda...

CVE-2026-109226: Improper Handling of Highly Compressed Data (Data Amplification)

SGLang through 0.5.21 contains a decompression amplification vulnerability in loadaudio that allows remote attackers to exhaust memory by submitting highly compressed audio decoded without duration or sample limits. Attackers can supply small FLAC-encoded silence files through audiourl or audioda...

CVE-2026-103243

LightLLM through 1.2.0 fails to validate imageurl and audiourl parameters in multimodal endpoints, allowing unauthenticated attackers to perform server-side request forgery. Attackers can supply arbitrary URLs to fetch internal resources, with vision model processing disclosing content or error...

CVE-2026-103243 LightLLM through 1.2.0 Server-Side Request Forgery via multimodal endpoints

LightLLM through 1.2.0 fails to validate imageurl and audiourl parameters in multimodal endpoints, allowing unauthenticated attackers to perform server-side request forgery. Attackers can supply arbitrary URLs to fetch internal resources, with vision model processing disclosing content or error...

CVE-2026-103243

Versions of LightLLM up to and including 1.2.0 are vulnerable to a Server-Side Request Forgery (SSRF) . The root cause is a failure to validate the image_url and audio_url parameters within multimodal endpoints . This allows unauthenticated attackers to supply arbitrary URLs to fetch internal res...

CVE-2026-103243 LightLLM through 1.2.0 Server-Side Request Forgery via multimodal endpoints

LightLLM through 1.2.0 fails to validate imageurl and audiourl parameters in multimodal endpoints, allowing unauthenticated attackers to perform server-side request forgery. Attackers can supply arbitrary URLs to fetch internal resources, with vision model processing disclosing content or error...

CVE-2026-103243 LightLLM through 1.2.0 Server-Side Request Forgery via multimodal endpoints

LightLLM through 1.2.0 fails to validate imageurl and audiourl parameters in multimodal endpoints, allowing unauthenticated attackers to perform server-side request forgery. Attackers can supply arbitrary URLs to fetch internal resources, with vision model processing disclosing content or error...

EUVD-2026-89988

LightLLM through 1.2.0 fails to validate imageurl and audiourl parameters in multimodal endpoints, allowing unauthenticated attackers to perform server-side request forgery. Attackers can supply arbitrary URLs to fetch internal resources, with vision model processing disclosing content or error...

CVE-2026-103243: Server-Side Request Forgery (SSRF)

LightLLM through 1.2.0 fails to validate imageurl and audiourl parameters in multimodal endpoints, allowing unauthenticated attackers to perform server-side request forgery. Attackers can supply arbitrary URLs to fetch internal resources, with vision model processing disclosing content or error...

PYSEC-2026-4184

vLLM through 0.29.0 fetches and fully materializes remote or inline media before enforcing its documented media controls the VLLMMAXAUDIOCLIPFILESIZEMB compressed-audio size cap, default 25 MB, and the per-modality --limit-mm-per-prompt item limits. Across four ingress paths — the shared...

CVE-2026-100650 vLLM before 0.29.0 Resource Exhaustion via Unbounded Media Materialization

vLLM through 0.29.0 fetches and fully materializes remote or inline media before enforcing its documented media controls the VLLMMAXAUDIOCLIPFILESIZEMB compressed-audio size cap, default 25 MB, and the per-modality --limit-mm-per-prompt item limits. Across four ingress paths — the shared...

CVE-2026-100650 vLLM before 0.29.0 Resource Exhaustion via Unbounded Media Materialization

vLLM through 0.29.0 fetches and fully materializes remote or inline media before enforcing its documented media controls the VLLMMAXAUDIOCLIPFILESIZEMB compressed-audio size cap, default 25 MB, and the per-modality --limit-mm-per-prompt item limits. Across four ingress paths — the shared...

CVE-2026-100650

Versions of vLLM through 0.29.0 are vulnerable to a resource exhaustion flaw where the system fully materializes remote or inline media before enforcing documented size and quantity limits (such as VLLM_MAX_AUDIO_CLIP_FILESIZE_MB ). The vulnerability exists across four ingress paths: the shared m...

mistral.rs Media Loader: Unauthenticated SSRF and arbitrary local file read via image_url

Summary mistral.rs fetches any request-supplied image/audio URL with no host or IP validation, and opens arbitrary local files a file:// URL, or any existing relative/absolute path. A remote, unauthenticated client of any vision/audio deployment can cause the server to issue requests to internal ...

CVE-2026-85686

ms-swift 4.5.2 contains a server-side request forgery vulnerability in the swift deploy OpenAI-compatible API that fetches multimodal media URLs without validation or redirect filtering. Unauthenticated attackers can supply arbitrary imageurl, audiourl, or videourl parameters to make the server...