CVE-2026-126396

The vLLM library (versions 0.24.0 to before 0.31.0 ) is vulnerable to a resource exhaustion issue within the MiniMax M3 VL video processor . The root cause is the lack of range validation or min_pixels

EUVD-2026-125169

vLLM from 0.24.0 before 0.31.0 contains a resource exhaustion vulnerability in the MiniMax M3 VL video processor, which accepts request-level minpixels without range or minpixels = maxpixels validation. Its video-wide pixel budget is enforced only when maxlongsidepixel is set, and that value...

CVE-2026-126396 vLLM from 0.24.0 before 0.31.0 Resource Exhaustion via MiniMax M3 min_pixels

vLLM from 0.24.0 before 0.31.0 contains a resource exhaustion vulnerability in the MiniMax M3 VL video processor, which accepts request-level minpixels without range or minpixels = maxpixels validation. Its video-wide pixel budget is enforced only when maxlongsidepixel is set, and that value...