{"id":29730,"date":"2026-09-27T00:31:33","date_gmt":"2026-09-26T16:31:33","guid":{"rendered":"https:\/\/www.54iter.cn\/?vuln=cve-2026-100650"},"modified":"2026-09-27T00:31:33","modified_gmt":"2026-09-26T16:31:33","slug":"cve-2026-100650","status":"publish","type":"vuln","link":"https:\/\/www.54iter.cn\/?vuln=cve-2026-100650","title":{"rendered":"CVE-2026-100650 [MEDIUM] &#8211; vLLM through 0.29.0 fetches and fully materializes remote or inline media before enforcing"},"content":{"rendered":"<p>vLLM through 0.29.0 fetches and fully materializes remote or inline media before enforcing its documented media controls (the VLLM_MAX_AUDIO_CLIP_FILESIZE_MB compressed-audio size cap, default 25 MB, and the per-modality &#8211;limit-mm-per-prompt item limits). Across four ingress paths \u2014 the shared media-acquisition layer (HTTPConnection.get_bytes()\/async_get_bytes()), the chat completions audio_url\/base64 path, the batch speech runner, and the Rust frontend POST \/tokenize route \u2014 the server reads the entire HTTP response body, base64-decodes the inline payload, or spawns one fetch\/decode task per media part, and only then applies the limit (or, on some paths, never applies it). A remote attacker can therefore cause the API server or batch-runner process to allocate memory and consume outbound bandwidth proportional to an attacker-chosen body size or media item count before the request is rejected, resulting in pre-inference memory and bandwidth exhaustion (denial of service). The chat and batch surfaces require an API key when one is configured; the Rust frontend \/tokenize route is unauthenticated by design. There is no code execution or data disclosure impact.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>vLLM through 0.29.0 fetches and fully materializes remote or inline media before enforcing its documented media controls (the VLLM_MAX_AUDIO_CLIP_FILESIZE_MB compressed-audio size cap, default 25 MB, <\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-29730","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/29730","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=29730"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=29730"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=29730"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}