vLLM is an inference and serving engine for large language models. Prior to 0.30.0, a caller can use the request-level media_io_kwargs field to select the GLMGA video backend and supply large values for the fps and max_frames options without a strict work ceiling. GLMGA constructs and deduplicates an attacker-sized pre-decode frame-index list, allowing a compact request and tiny valid video to consume disproportionate CPU time and memory in the shared media-loading executor. This issue is fixed in version 0.30.0.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - vLLM is an inference and serving engine for large language models. Prior to 0.30.0, a caller can use the
    request-level media_io_kwargs field to select the GLMGA video backend and supply large values for the fps
    and max_frames options without a strict work ceiling. GLMGA constructs and deduplicates an attacker-sized
    pre-decode frame-index list, allowing a compact request and tiny valid video to consume disproportionate
    CPU time and memory in the shared media-loading executor. This issue is fixed in version 0.30.0.
    (CVE-2026-105760)

ID	Name	Product	Family	Type	Severity
476110	Chainguard: vllm-openai-cuda-13.0: security update to 0.31.0-r0	Tenable Cloud Security	Chainguard Local Security Checks	Local	medium
476110	Chainguard: vllm-openai-cuda-13.0: security update to 0.31.0-r0	Tenable Self-Hosted Container Security	Chainguard Local Security Checks	Local	medium
472970	SCA: security update for vllm (GHSA-58v5-2m8f-94pr)	Tenable Cloud Security	SCA Checks	Local	medium
472970	SCA: security update for vllm (GHSA-58v5-2m8f-94pr)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium

Detections

Analytics

CVE-2026-105760

medium

Tenable Plugins

medium

medium

medium

medium