CVE-2026-116179 | vllm-project vLLM up to 0.30.x VideoMediaIO VideoMediaIO.load_base64 num_frames resource consumption

A vulnerability has been found in vllm-project vLLM up to 0.30.x and classified as problematic. This affects the function VideoMediaIO.load_base64 of the component VideoMediaIO. This manipulation of the argument num_frames causes resource consumption.

This vulnerability is tracked as CVE-2026-116179. The attack is possible to be carried out remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More