CVE-2026-105754

A flaw was found in vLLM. The scale-out inference service fails to properly validate caller-supplied multimodal parameters, such as image geometry and cache identifiers, against the active model's configuration. An authenticated remote attacker can exploit this vulnerability by submitting crafted...