Quick answers
- Is CVE-2026-90554 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-90554 being exploited in the wild.
- How severe is CVE-2026-90554?
- Medium severity, with a CVSS score of 6.2, published 12 September 2026.
- Which products and versions are affected?
- Vllm >=0.10.2, <0.28.0.
- Is there a fix for CVE-2026-90554?
- A patch was published on 2026-09-12: Fixed in vLLM 0.28.0 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
- How is CVE-2026-90554 attacked?
- It is attacked with local access or over the network, in a software library.
- Am I affected by CVE-2026-90554?
- Check whether you run Vllm at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
The vulnerability is an uncontrolled resource consumption flaw in the NanoNemotronVL video audio extraction code. The _extract_audio_from_videos function in nano_nemotron_vl.py calls load_audio_pyav() without enforcing the max_duration_s or max_decode_bytes parameters, bypassing the protections available in the direct audio upload path. An attacker with network access to a vLLM inference server configured with use_audio_in_video=True can supply a specially-crafted video as multimodal input, forcing gigabytes of memory allocation during audio decoding. This results in memory exhaustion and denial of service. The vulnerability affects vLLM versions 0.10.2 through 0.27.x and is fixed in 0.28.0.
Affected products
- vLLM vLLM >=0.10.2, <0.28.0
Timeline
- 2026-08-28: disclosed
- 2026-09-12: patched: Fixed in vLLM 0.28.0