vLLM: VLLM versions before 0.28.0 fail to validate audio sample rate headers in the transcription…
vLLM
More for vLLM RSS feed for vLLM
- Severity
- Medium, CVSS 6.5
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Record
- CVE-2026-90555
- Affects
- vLLM
- Known exploited
- Not listed in the CISA Known Exploited Vulnerabilities catalog
- Published
- Record first published by the source
- September 12, 2026
- Source last modified
- September 16, 2026
Description
vLLM versions before 0.28.0 fail to validate audio sample rate headers in the transcription endpoint, allowing authenticated clients to bypass duration checks. Attackers can submit forged FLAC headers with inflated sample rates to trigger excessive memory allocation and crash the API server process affecting all tenants.
Description quoted from the NVD record.