PT-2026-120181

vLLM from 0.7.3 before 0.31.0 contains an uncontrolled resource consumption vulnerability that allows remote clients to control multimodal processor parameters by supplying per-request mm processor kwargs. Attackers can set large image size, patch count, crop count, or frame count values in Isaac...