CVE-2026-90554

Name of the Vulnerable Software and Affected Versions vLLM versions 0.10.2 through 0.27.9

Description NanoNemotronVL models fail to apply audio decode-size or duration limits when extracting audio from video input. In the file nano nemotron vl.py, the function extract audio from videos() calls load audio pyav() without specifying the max duration s or max decode bytes parameters. Consequently, the limits defined by VLLM MAX AUDIO DECODE DURATION S and VLLM MAX AUDIO DECODE BYTES are not enforced. When a model is served with use audio in video set to True, an attacker can provide a small, highly compressed video as multimodal input to force the server to allocate excessive memory during audio decoding, leading to a denial of service.

Recommendations Update vLLM to version 0.28.0. As a temporary mitigation, set use audio in video to False when serving NanoNemotronVL models.