CVE-2026-34760

Name of the Vulnerable Software and Affected Versions vLLM versions 0.5.5 through 0.17.999

Description vLLM, an inference and serving engine for large language models (LLMs), exhibits an inconsistency in audio processing. Versions 0.5.5 through 0.17.999 utilize numpy.mean for mono downmixing via Librosa, deviating from the ITU-R BS.775-4 weighted downmixing standard. This discrepancy causes differences in audio perception between human listeners and AI models that process audio using Librosa.

Recommendations Update to version 0.18.0 or later.