CVE-2026-90554
MEDIUM 6.9vLLM versions >=0.10.2 and <0.28.0 do not apply any audio decode-size or duration limit when extracting audio from video input for NanoNemotronVL models. In nano_nemotron_vl.py, _extract_audio_from_videos calls load_audio_pyav(BytesIO(video_bytes)) without the max_duration_s or max_decode_bytes parameters, so neither VLLM_MAX_AUDIO_DECODE_DURATION_S nor VLLM_MAX_AUDIO_DECODE_BYTES is enforced (unlike the direct audio upload path in AudioMediaIO). When a NanoNemotronVL model is served with use_audio_in_video=True, an attacker who supplies a small, highly compressed video as multimodal input can force the server to allocate gigabytes of memory during audio decoding, resulting in a denial of service. Fixed in vLLM 0.28.0.
NO EXPLOITATION SIGNALS
No known exploitation, public exploit, or elevated probability at this time. Track for changes.
Exploitation likelihood
0.2%chance of exploitation in 30 days · 10th percentile
○ In CISA KEV
○ Catalogued PoC
Impact if exploited
6.9CVSS 4.0 · MEDIUM
- ConfidentialityNone
- IntegrityNone
- AvailabilityHigh
What an attacker needs
- ⚠Access: Requires local access to the host
- ✓Privileges: No account or privileges required
- ✓User interaction: No user interaction needed
- ✓Complexity: No special conditions — reliably repeatable
- ✓Requirements: No special attack requirements
✓ lowers the bar for an attacker · ⚠ raises it
Proof of concept
No public PoC is currently catalogued.
Search for new PoCs
Search GitHub now — results may be empty or unverified.
Tracked sources are checked daily for recent CVEs, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.
Data snapshot:
Weakness (CWE)
- CWE-400: Uncontrolled Resource Consumption
CVSS vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
References and research data (JSON)
Vendor product assessments
rhaii/vllm-cpu-rhel9 as a component of Red Hat AI Inference Server · known affected
Vendor assessment for this product only.
pkg:oci/vllm-cpu-rhel9?repository_url=registry.redhat.io/rhaii/vllm-cpu-rhel9
- workaround: To mitigate this issue, disable the `use_audio_in_video` feature if it is not required for your deployment. This prevents the vulnerable audio extraction code path from being exercised. If disabling this feature is not feasible, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
rhaii/vllm-cuda-rhel9 as a component of Red Hat AI Inference Server · known affected
Vendor assessment for this product only.
pkg:oci/vllm-cuda-rhel9?repository_url=registry.redhat.io/rhaii/vllm-cuda-rhel9
- workaround: To mitigate this issue, disable the `use_audio_in_video` feature if it is not required for your deployment. This prevents the vulnerable audio extraction code path from being exercised. If disabling this feature is not feasible, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
rhaii/vllm-gaudi-rhel9 as a component of Red Hat AI Inference Server · known affected
Vendor assessment for this product only.
pkg:oci/vllm-gaudi-rhel9?repository_url=registry.redhat.io/rhaii/vllm-gaudi-rhel9
- workaround: To mitigate this issue, disable the `use_audio_in_video` feature if it is not required for your deployment. This prevents the vulnerable audio extraction code path from being exercised. If disabling this feature is not feasible, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
rhaii/vllm-neuron-rhel9 as a component of Red Hat AI Inference Server · known affected
Vendor assessment for this product only.
pkg:oci/vllm-neuron-rhel9?repository_url=registry.redhat.io/rhaii/vllm-neuron-rhel9
- workaround: To mitigate this issue, disable the `use_audio_in_video` feature if it is not required for your deployment. This prevents the vulnerable audio extraction code path from being exercised. If disabling this feature is not feasible, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
rhaii/vllm-rocm-rhel9 as a component of Red Hat AI Inference Server · known affected
Vendor assessment for this product only.
pkg:oci/vllm-rocm-rhel9?repository_url=registry.redhat.io/rhaii/vllm-rocm-rhel9
- workaround: To mitigate this issue, disable the `use_audio_in_video` feature if it is not required for your deployment. This prevents the vulnerable audio extraction code path from being exercised. If disabling this feature is not feasible, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
rhaii/vllm-spyre-rhel9 as a component of Red Hat AI Inference Server · known affected
Vendor assessment for this product only.
pkg:oci/vllm-spyre-rhel9?repository_url=registry.redhat.io/rhaii/vllm-spyre-rhel9
- workaround: To mitigate this issue, disable the `use_audio_in_video` feature if it is not required for your deployment. This prevents the vulnerable audio extraction code path from being exercised. If disabling this feature is not feasible, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
rhaii/vllm-tpu-rhel9 as a component of Red Hat AI Inference Server · known affected
Vendor assessment for this product only.
pkg:oci/vllm-tpu-rhel9?repository_url=registry.redhat.io/rhaii/vllm-tpu-rhel9
- workaround: To mitigate this issue, disable the `use_audio_in_video` feature if it is not required for your deployment. This prevents the vulnerable audio extraction code path from being exercised. If disabling this feature is not feasible, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
rhaiis/vllm-cpu-rhel9 as a component of Red Hat AI Inference Server · known affected
Vendor assessment for this product only.
pkg:oci/vllm-cpu-rhel9?repository_url=registry.redhat.io/rhaiis/vllm-cpu-rhel9
- workaround: To mitigate this issue, disable the `use_audio_in_video` feature if it is not required for your deployment. This prevents the vulnerable audio extraction code path from being exercised. If disabling this feature is not feasible, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
rhaiis/vllm-cuda-rhel9 as a component of Red Hat AI Inference Server · known affected
Vendor assessment for this product only.
pkg:oci/vllm-cuda-rhel9?repository_url=registry.redhat.io/rhaiis/vllm-cuda-rhel9
- workaround: To mitigate this issue, disable the `use_audio_in_video` feature if it is not required for your deployment. This prevents the vulnerable audio extraction code path from being exercised. If disabling this feature is not feasible, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
rhaiis/vllm-neuron-rhel9 as a component of Red Hat AI Inference Server · known affected
Vendor assessment for this product only.
pkg:oci/vllm-neuron-rhel9?repository_url=registry.redhat.io/rhaiis/vllm-neuron-rhel9
- workaround: To mitigate this issue, disable the `use_audio_in_video` feature if it is not required for your deployment. This prevents the vulnerable audio extraction code path from being exercised. If disabling this feature is not feasible, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
rhaiis/vllm-rocm-rhel9 as a component of Red Hat AI Inference Server · known affected
Vendor assessment for this product only.
pkg:oci/vllm-rocm-rhel9?repository_url=registry.redhat.io/rhaiis/vllm-rocm-rhel9
- workaround: To mitigate this issue, disable the `use_audio_in_video` feature if it is not required for your deployment. This prevents the vulnerable audio extraction code path from being exercised. If disabling this feature is not feasible, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
rhaiis/vllm-spyre-rhel9 as a component of Red Hat AI Inference Server · known affected
Vendor assessment for this product only.
pkg:oci/vllm-spyre-rhel9?repository_url=registry.redhat.io/rhaiis/vllm-spyre-rhel9
- workaround: To mitigate this issue, disable the `use_audio_in_video` feature if it is not required for your deployment. This prevents the vulnerable audio extraction code path from being exercised. If disabling this feature is not feasible, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
rhaiis/vllm-tpu-rhel9 as a component of Red Hat AI Inference Server · known affected
Vendor assessment for this product only.
pkg:oci/vllm-tpu-rhel9?repository_url=registry.redhat.io/rhaiis/vllm-tpu-rhel9
- workaround: To mitigate this issue, disable the `use_audio_in_video` feature if it is not required for your deployment. This prevents the vulnerable audio extraction code path from being exercised. If disabling this feature is not feasible, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
rhelai3/bootc-aws-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3 · known affected
Vendor assessment for this product only.
pkg:oci/bootc-aws-cuda-rhel9?repository_url=registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9
- workaround: To mitigate this issue, disable the `use_audio_in_video` feature if it is not required for your deployment. This prevents the vulnerable audio extraction code path from being exercised. If disabling this feature is not feasible, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
rhelai3/bootc-azure-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3 · known affected
Vendor assessment for this product only.
pkg:oci/bootc-azure-cuda-rhel9?repository_url=registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9
- workaround: To mitigate this issue, disable the `use_audio_in_video` feature if it is not required for your deployment. This prevents the vulnerable audio extraction code path from being exercised. If disabling this feature is not feasible, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
rhelai3/bootc-azure-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3 · known affected
Vendor assessment for this product only.
pkg:oci/bootc-azure-rocm-rhel9?repository_url=registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9
- workaround: To mitigate this issue, disable the `use_audio_in_video` feature if it is not required for your deployment. This prevents the vulnerable audio extraction code path from being exercised. If disabling this feature is not feasible, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
rhelai3/bootc-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3 · known affected
Vendor assessment for this product only.
pkg:oci/bootc-cuda-rhel9?repository_url=registry.redhat.io/rhelai3/bootc-cuda-rhel9
- workaround: To mitigate this issue, disable the `use_audio_in_video` feature if it is not required for your deployment. This prevents the vulnerable audio extraction code path from being exercised. If disabling this feature is not feasible, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
rhelai3/bootc-gaudi-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3 · known affected
Vendor assessment for this product only.
pkg:oci/bootc-gaudi-rhel9?repository_url=registry.redhat.io/rhelai3/bootc-gaudi-rhel9
- workaround: To mitigate this issue, disable the `use_audio_in_video` feature if it is not required for your deployment. This prevents the vulnerable audio extraction code path from being exercised. If disabling this feature is not feasible, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
rhelai3/bootc-gcp-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3 · known affected
Vendor assessment for this product only.
pkg:oci/bootc-gcp-cuda-rhel9?repository_url=registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9
- workaround: To mitigate this issue, disable the `use_audio_in_video` feature if it is not required for your deployment. This prevents the vulnerable audio extraction code path from being exercised. If disabling this feature is not feasible, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
rhelai3/bootc-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3 · known affected
Vendor assessment for this product only.
pkg:oci/bootc-rocm-rhel9?repository_url=registry.redhat.io/rhelai3/bootc-rocm-rhel9
- workaround: To mitigate this issue, disable the `use_audio_in_video` feature if it is not required for your deployment. This prevents the vulnerable audio extraction code path from being exercised. If disabling this feature is not feasible, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
rhoai/odh-kserve-agent-rhel9 as a component of Red Hat OpenShift AI (RHOAI) · known affected
Vendor assessment for this product only.
pkg:oci/odh-kserve-agent-rhel9?repository_url=registry.redhat.io/rhoai/odh-kserve-agent-rhel9
- workaround: To mitigate this issue, disable the `use_audio_in_video` feature if it is not required for your deployment. This prevents the vulnerable audio extraction code path from being exercised. If disabling this feature is not feasible, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
rhoai/odh-kserve-controller-rhel9 as a component of Red Hat OpenShift AI (RHOAI) · known affected
Vendor assessment for this product only.
pkg:oci/odh-kserve-controller-rhel9?repository_url=registry.redhat.io/rhoai/odh-kserve-controller-rhel9
- workaround: To mitigate this issue, disable the `use_audio_in_video` feature if it is not required for your deployment. This prevents the vulnerable audio extraction code path from being exercised. If disabling this feature is not feasible, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
rhoai/odh-kserve-router-rhel9 as a component of Red Hat OpenShift AI (RHOAI) · known affected
Vendor assessment for this product only.
pkg:oci/odh-kserve-router-rhel9?repository_url=registry.redhat.io/rhoai/odh-kserve-router-rhel9
- workaround: To mitigate this issue, disable the `use_audio_in_video` feature if it is not required for your deployment. This prevents the vulnerable audio extraction code path from being exercised. If disabling this feature is not feasible, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
rhoai/odh-kserve-storage-initializer-rhel9 as a component of Red Hat OpenShift AI (RHOAI) · known affected
Vendor assessment for this product only.
pkg:oci/odh-kserve-storage-initializer-rhel9?repository_url=registry.redhat.io/rhoai/odh-kserve-storage-initializer-rhel9
- workaround: To mitigate this issue, disable the `use_audio_in_video` feature if it is not required for your deployment. This prevents the vulnerable audio extraction code path from being exercised. If disabling this feature is not feasible, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
rhoai/odh-llm-d-kv-cache-rhel9 as a component of Red Hat OpenShift AI (RHOAI) · known affected
Vendor assessment for this product only.
pkg:oci/odh-llm-d-kv-cache-rhel9?repository_url=registry.redhat.io/rhoai/odh-llm-d-kv-cache-rhel9
- workaround: To mitigate this issue, disable the `use_audio_in_video` feature if it is not required for your deployment. This prevents the vulnerable audio extraction code path from being exercised. If disabling this feature is not feasible, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
rhoai/odh-th-torch-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI) · known affected
Vendor assessment for this product only.
pkg:oci/odh-th-torch-cuda-py312-rhel9?repository_url=registry.redhat.io/rhoai/odh-th-torch-cuda-py312-rhel9
- workaround: To mitigate this issue, disable the `use_audio_in_video` feature if it is not required for your deployment. This prevents the vulnerable audio extraction code path from being exercised. If disabling this feature is not feasible, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
rhoai/odh-vllm-gaudi-rhel9 as a component of Red Hat OpenShift AI (RHOAI) · known affected
Vendor assessment for this product only.
pkg:oci/odh-vllm-gaudi-rhel9?repository_url=registry.redhat.io/rhoai/odh-vllm-gaudi-rhel9
- workaround: To mitigate this issue, disable the `use_audio_in_video` feature if it is not required for your deployment. This prevents the vulnerable audio extraction code path from being exercised. If disabling this feature is not feasible, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
Known Affected Software Configurations
| Vendor | Product | Version range |
|---|---|---|
| Vllm | Vllm | ≥ 0.10.2 and < 0.28.0 |
All CVSS metrics
- MEDIUM 6.9 v4.0 · CNA Primary
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N - MEDIUM 6.2 v3.1 · CNA Primary
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - MEDIUM 6.9 v4.0 · NVD Secondary
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - MEDIUM 6.2 v3.1 · NVD Secondary
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - HIGH 7.5 v3.1 · NVD Primary
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References
Advisories
- https://github.com/vllm-project/vllm/security/advisories/GHSA-936p-m5pv-vvjf CVE record · VulnCheck · Updated 2026-09-12T12:08:57.508Z
NVD · CVE-2026-90554 · Updated 2026-09-24T20:28:13.590
Red Hat · CVE-2026-90554 · Updated 2026-09-24T20:51:41+00:00 - https://www.vulncheck.com/advisories/vllm-before-0.28.0-denial-of-service-via-audio-extraction CVE record · VulnCheck · Updated 2026-09-12T12:08:57.508Z
NVD · CVE-2026-90554 · Updated 2026-09-24T20:28:13.590
Red Hat · CVE-2026-90554 · Updated 2026-09-24T20:51:41+00:00 - https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-90554.json Red Hat · CVE-2026-90554 · Updated 2026-09-24T20:51:41+00:00
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-76872 EUVD · EUVD-2026-76872
Technical & other
- https://access.redhat.com/security/cve/CVE-2026-90554 Red Hat · CVE-2026-90554 · Updated 2026-09-24T20:51:41+00:00
- https://bugzilla.redhat.com/show_bug.cgi?id=2532572 Red Hat · CVE-2026-90554 · Updated 2026-09-24T20:51:41+00:00
- https://www.cve.org/CVERecord?id=CVE-2026-90554 Red Hat · CVE-2026-90554 · Updated 2026-09-24T20:51:41+00:00
- https://nvd.nist.gov/vuln/detail/CVE-2026-90554 Red Hat · CVE-2026-90554 · Updated 2026-09-24T20:51:41+00:00