CVE-2026-105758 | vllm-project vLLM up to 0.29.x Video Backend Qwen2VLVideoBackend/Qwen3VLVideoBackend allocation of resources

SecurityVulns
Yanac

A vulnerability identified as problematic has been detected in vllm-project vLLM up to 0.29.x. The impacted element is the function Qwen2VLVideoBackend/Qwen3VLVideoBackend of the component Video Backend. The manipulation of the argument media_io_kwargs.video.max_frames/media_io_kwargs.video.fps leads to allocation of resources.

This vulnerability is traded as CVE-2026-105758. It is possible to initiate the attack remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More