CVE-2026-116175

Name of the Vulnerable Software and Affected Versions vLLM versions 0.19.0 through 0.23.x

Description A decompression bomb issue exists in the AudioMediaIO multimodal path due to the load audio() function being called without a max duration s decoded-duration limit. Authenticated attackers can exploit this by sending small compressed audio files via the input audio or audio url parameters in the '/v1/chat/completions' endpoint. These files expand into massive decoded PCM (Pulse Code Modulation, a raw audio format), leading to server memory exhaustion.

Recommendations Update vLLM to version 0.24.0 or later. As a temporary mitigation, restrict the use of the input audio and audio url parameters in the '/v1/chat/completions' endpoint.