vllm before 0.29.0 Uncontrolled Resource Consumption via Audio Decoding

vllm before 0.29.0 fails to enforce VLLM_MAX_AUDIO_CLIP_FILESIZE_MB limit in multimodal chat audio decoding, allowing unauthenticated clients to bypass file size restrictions. Attackers can submit oversized audio files through chat endpoints to consume excessive memory and CPU resources during decoding.

Problem type

Uncontrolled Resource Consumption

Affected products

vllm-project

vllm

< 0.29.0 - AFFECTED

0.29.0 - UNAFFECTED

References

GitHub Security Advisory (GHSA-jcq2-4gch-5qhf)

https://github.com/vllm-project/vllm/security/advisories/GHSA-jcq2-4gch-5qhf

vendor-advisory

VulnCheck Advisory: vllm before 0.29.0 Uncontrolled Resource Consumption via Audio Decoding

https://www.vulncheck.com/advisories/vllm-before-0.29.0-uncontrolled-resource-consumption-via-audio-decoding

third-party-advisory

GitHub Security Advisories

GHSA-526f-298v-f597

vllm before 0.29.0 fails to enforce VLLM_MAX_AUDIO_CLIP_FILESIZE_MB limit in multimodal chat...

https://github.com/advisories/GHSA-526f-298v-f597

github.com

https://github.com/vllm-project/vllm/security/advisories/GHSA-jcq2-4gch-5qhf

nvd.nist.gov

https://nvd.nist.gov/vuln/detail/CVE-2026-100648

vulncheck.com

https://www.vulncheck.com/advisories/vllm-before-0.29.0-uncontrolled-resource-consumption-via-audio-decoding

github.com

https://github.com/advisories/GHSA-526f-298v-f597

JSON source

https://cveawg.mitre.org/api/cve/CVE-2026-100648

Click to expand

{
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "cveMetadata": {
    "cveId": "CVE-2026-100648",
    "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
    "assignerShortName": "VulnCheck",
    "dateUpdated": "2026-09-26T13:23:18.965Z",
    "dateReserved": "2026-09-26T02:33:07.898Z",
    "datePublished": "2026-09-26T13:23:18.965Z",
    "state": "PUBLISHED"
  },
  "containers": {
    "cna": {
      "providerMetadata": {
        "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
        "shortName": "VulnCheck",
        "dateUpdated": "2026-09-26T13:23:18.965Z"
      },
      "datePublic": "2026-09-12T00:00:00.000Z",
      "title": "vllm before 0.29.0 Uncontrolled Resource Consumption via Audio Decoding",
      "descriptions": [
        {
          "lang": "en",
          "value": "vllm before 0.29.0 fails to enforce VLLM_MAX_AUDIO_CLIP_FILESIZE_MB limit in multimodal chat audio decoding, allowing unauthenticated clients to bypass file size restrictions. Attackers can submit oversized audio files through chat endpoints to consume excessive memory and CPU resources during decoding."
        }
      ],
      "affected": [
        {
          "vendor": "vllm-project",
          "product": "vllm",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "0.29.0"
            },
            {
              "version": "0.29.0",
              "status": "unaffected",
              "versionType": "semver"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "lang": "en",
              "description": "Uncontrolled Resource Consumption",
              "cweId": "CWE-400",
              "type": "CWE"
            }
          ]
        }
      ],
      "references": [
        {
          "url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-jcq2-4gch-5qhf",
          "name": "GitHub Security Advisory (GHSA-jcq2-4gch-5qhf)",
          "tags": [
            "vendor-advisory"
          ]
        },
        {
          "url": "https://www.vulncheck.com/advisories/vllm-before-0.29.0-uncontrolled-resource-consumption-via-audio-decoding",
          "name": "VulnCheck Advisory: vllm before 0.29.0 Uncontrolled Resource Consumption via Audio Decoding",
          "tags": [
            "third-party-advisory"
          ]
        }
      ],
      "metrics": [
        {
          "format": "CVSS"
        },
        {
          "format": "CVSS",
          "cvssV3_1": {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM"
          }
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "santhreal",
          "type": "reporter"
        },
        {
          "lang": "en",
          "value": "jperezdealgaba",
          "type": "coordinator"
        }
      ]
    }
  }
}