Denial of Service Issue in vLLM's Video Backend Classes by Vendor vLLM

CVE-2026-105758

What is CVE-2026-105758?

The vLLM inference and serving engine contains a vulnerability in the Qwen2VLVideoBackend and Qwen3VLVideoBackend classes where request-level values for media_io_kwargs.video.max_frames and media_io_kwargs.video.fps are accepted without proper server-side enforceable limits. An unauthenticated attacker can exploit this by sending specially crafted requests to the /tokenize endpoint, which may exhaust frontend memory resources, leading to the potential termination of the API process. Notably, the Rust frontend is unaffected as it properly rejects the media_io_kwargs field. The issue has been addressed in version 0.30.0.

References