CVE-2026-105760: vLLM: GLMGA video sampling permits request-driven CPU and memory exhaustion
The OpenAI-compatible chat endpoint accepts request-level video loader options through media_io_kwargs. A caller can select the GLMGA sampler and provide large fps and max_frames values. GLMGA first constructs an attacker-sized Python index list and then deduplicates it, even when the supplied video contains only a few frames. This work occurs in the shared media-loading executor before frame reads, allowing a tiny valid video and compact JSON options to consume disproportionate CPU time and memory and delay unrelated media requests.
The demonstrated impact is partial denial of service. No memory corruption, data disclosure, or code execution is claimed.
References
- github.com/advisories/GHSA-58v5-2m8f-94pr
- github.com/vllm-project/vllm/commit/8b6de0eb9a09ef53f20cf06bd4d17ee264b9c2a7
- github.com/vllm-project/vllm/pull/54935
- github.com/vllm-project/vllm/releases/tag/v0.30.0
- github.com/vllm-project/vllm/security/advisories/GHSA-58v5-2m8f-94pr
- nvd.nist.gov/vuln/detail/CVE-2026-105760
Code Behaviors & Features
Detect and mitigate CVE-2026-105760 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →