CVE-2026-114055

A flaw was found in vLLM. A remote attacker can cause a Denial of Service DoS by supplying manipulated multimodal processing parameters with excessively large image, frame, or patch values. Because the application processes these unvalidated parameters directly, it exhausts available memory and...