CVE-2026-116178 | vllm-project vLLM up to 0.29.x Multimodal Position Construction /inference/v1/generate resource consumption

A vulnerability was found in vllm-project vLLM up to 0.29.x. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /inference/v1/generate of the component Multimodal Position Construction. The manipulation leads to resource consumption.

This vulnerability is documented as CVE-2026-116178. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More