CVE-2026-90554

vLLM versions >=0.10.2 and <0.28.0 do not apply any audio decode-size or duration limit when extracting audio from video input for NanoNemotronVL models. In nano nemotron vl.py, extract audio from videos calls load audio pyav(BytesIO(video bytes)) without the max duration s or max decode bytes parameters, so neither VLLM MAX AUDIO DECODE DURATION S nor VLLM MAX AUDIO DECODE BYTES is enforced (unlike the direct audio upload path in AudioMediaIO). When a NanoNemotronVL model is served with use audio in video=True, an attacker who supplies a small, highly compressed video as multimodal input can force the server to allocate gigabytes of memory during audio decoding, resulting in a denial of service. Fixed in vLLM 0.28.0.