Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-116179

vLLM from 0.18.0 before 0.31.0 contains a resource exhaustion vulnerability that allows API clients to bypass the video/jpeg frame-count cap by overriding num_frames through media_io_kwargs. Attackers can set num_frames to -1 with a large inline video so VideoMediaIO.load_base64 decodes every frame, exhausting memory and crashing the API frontend.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 23.2%
CVSS Severity
CVSS v3 Score 7.5
Products affected by CVE-2026-116179
  • Vllm » Vllm » Version: 0.18.0
    cpe:2.3:a:vllm:vllm:0.18.0
  • Vllm » Vllm » Version: 0.18.1
    cpe:2.3:a:vllm:vllm:0.18.1
  • Vllm » Vllm » Version: 0.18.2
    cpe:2.3:a:vllm:vllm:0.18.2
  • Vllm » Vllm » Version: 0.19.0
    cpe:2.3:a:vllm:vllm:0.19.0
  • Vllm » Vllm » Version: 0.19.1
    cpe:2.3:a:vllm:vllm:0.19.1
  • Vllm » Vllm » Version: 0.19.2
    cpe:2.3:a:vllm:vllm:0.19.2
  • Vllm » Vllm » Version: 0.20.0
    cpe:2.3:a:vllm:vllm:0.20.0
  • Vllm » Vllm » Version: 0.20.1
    cpe:2.3:a:vllm:vllm:0.20.1
  • Vllm » Vllm » Version: 0.20.2
    cpe:2.3:a:vllm:vllm:0.20.2
  • Vllm » Vllm » Version: 0.21.0
    cpe:2.3:a:vllm:vllm:0.21.0
  • Vllm » Vllm » Version: 0.21.1
    cpe:2.3:a:vllm:vllm:0.21.1
  • Vllm » Vllm » Version: 0.22.0
    cpe:2.3:a:vllm:vllm:0.22.0
  • Vllm » Vllm » Version: 0.22.1
    cpe:2.3:a:vllm:vllm:0.22.1
  • Vllm » Vllm » Version: 0.23.0
    cpe:2.3:a:vllm:vllm:0.23.0
  • Vllm » Vllm » Version: 0.23.1
    cpe:2.3:a:vllm:vllm:0.23.1
  • Vllm » Vllm » Version: 0.24.0
    cpe:2.3:a:vllm:vllm:0.24.0
  • Vllm » Vllm » Version: 0.25.0
    cpe:2.3:a:vllm:vllm:0.25.0
  • Vllm » Vllm » Version: 0.25.1
    cpe:2.3:a:vllm:vllm:0.25.1
  • Vllm » Vllm » Version: 0.26.0
    cpe:2.3:a:vllm:vllm:0.26.0
  • Vllm » Vllm » Version: 0.26.1
    cpe:2.3:a:vllm:vllm:0.26.1
  • Vllm » Vllm » Version: 0.27.0
    cpe:2.3:a:vllm:vllm:0.27.0
  • Vllm » Vllm » Version: 0.27.1
    cpe:2.3:a:vllm:vllm:0.27.1
  • Vllm » Vllm » Version: 0.28.0
    cpe:2.3:a:vllm:vllm:0.28.0
  • Vllm » Vllm » Version: 0.28.1
    cpe:2.3:a:vllm:vllm:0.28.1
  • Vllm » Vllm » Version: 0.29.0
    cpe:2.3:a:vllm:vllm:0.29.0
  • Vllm » Vllm » Version: 0.29.1
    cpe:2.3:a:vllm:vllm:0.29.1
  • Vllm » Vllm » Version: 0.30.0
    cpe:2.3:a:vllm:vllm:0.30.0
  • Vllm » Vllm » Version: 0.30.1
    cpe:2.3:a:vllm:vllm:0.30.1


Products
Pricing
Contact Us

Shodan ® - All rights reserved