CVE-2026-115913 | vllm-project vLLM up to 0.31.x Phi-4 multimodal audio encoder phi4mm_audio.py MultiHeadedAttention.forward_attention resource consumption

A vulnerability described as problematic has been identified in vllm-project vLLM up to 0.31.x. This vulnerability affects the function MultiHeadedAttention.forward_attention of the file phi4mm_audio.py of the component Phi-4 multimodal audio encoder. Executing a manipulation can lead to resource consumption.

This vulnerability is registered as CVE-2026-115913. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More