CVE-2026-55646: vllm-project vllm Uncontrolled Resource Consumption
Vulnerability summary
CVE-2026-55646 is a medium (CVSS 6.5) Uncontrolled Resource Consumption vulnerability in vllm-project vllm. EPSS estimates a 0.52% chance of exploitation in the next 30 days, higher than 42.9% of scored vulnerabilities.
Timeline
- 06-07-2026PublishedVulnerability first disclosed.
- 06-07-2026Last modifiedVulnerability information updated.
Description
vLLM is an inference and serving engine for large language models. From 0.22.0 to 0.23.0, the /v1/audio/transcriptions and /v1/audio/translations routes call request.file.read() to fully materialize an uploaded audio file into memory before vLLM checks the documented VLLM_MAX_AUDIO_CLIP_FILESIZE_MB compressed upload size limit (default 25 MB) later in the speech-to-text preprocessing step, so an API caller who can reach those routes can submit an oversized multipart upload and cause vLLM to allocate memory proportional to the uploaded file size before the request is rejected as too large, creating memory pressure or terminating the process depending on deployment resource limits. This issue is fixed in version 0.24.0.
CVSS metrics
3 scores · 3 sources · 1 version- OSV · PypiEcosystem advisory · calculated6.5MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- NVDNIST6.5MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
0.52%
Chance of exploitation in the next 30 days
Percentile
43%
Versus all other CVEs
30-day change
0.00 pp
From 0.52% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-400Uncontrolled Resource ConsumptionThe product does not properly control the allocation and maintenance of a limited resource.
- CWE-770Allocation of Resources Without Limits or ThrottlingThe product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.
Affected systems
PyPI1 product
- vllm≥ 0.22.0, < 0.24.0
Vllm1 product
- vllm≥ 0.22.0, < 0.24.0
Vllm-project1 product
- vllm≥ 0.22.0, < 0.24.0
3 vendors · 3 products
References
6 links- github.com/vllm-project/vllm/security/advisories/GHSA-v82g-2437-67m2X Refsource CONFIRMWEBAdvisoryVendor Advisory
- github.com/vllm-project/vllm/commit/b997071ec493765abbed990c65843ed05e4708a8X Refsource MISCWEBFIXPatch
- github.com/vllm-project/vllmPACKAGE