HIGH 7.1 NVD
CVE-2026-90555
vLLM versions before 0.28.0 fail to validate audio sample rate headers in the transcription endpoint, allowing authenticated clients to bypass duration checks.
vLLM versions before 0.28.0 fail to validate audio sample rate headers in the transcription endpoint, allowing authenticated clients to bypass duration checks. Attackers can submit forged FLAC headers with inflated sample rates to trigger excessive memory allocation and crash the API server process affecting all tenants.
References
- https://github.com/vllm-project/vllm/security/advisories/GHSA-99f2-hwrc-gvq8
- https://www.vulncheck.com/advisories/vllm-before-0.28.0-denial-of-service-via-audio-header
This high severity vulnerability with a CVSS score of 7.1 was published on 2026-09-12 via NVD.
vulnfeed aggregates 12843 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.