CVE-2026-116175 | vllm-project vLLM up to 0.23.x AudioMediaIO /v1/chat/completions load_audio input_audio/audio_url resource consumption

SecurityVulns
Yanac

A vulnerability labeled as problematic has been found in vllm-project vLLM up to 0.23.x. Affected by this issue is the function load_audio of the file /v1/chat/completions of the component AudioMediaIO. The manipulation of the argument input_audio/audio_url results in resource consumption.

This vulnerability is known as CVE-2026-116175. It is possible to launch the attack remotely. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More