# mistral.rs unbounded media fetch and video frame extraction DoS

Source: https://junglewise.ai/threats/mistral-rs-unbounded-media-fetch-and-video-frame-extraction-dos-9ec59bbb  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-10. Updated: 2026-09-25  
License: CC BY 4.0 with a link back

Severity: high · CVSS 7.5 · Published 2026-09-10

mistral.rs is an OpenAI-compatible HTTP server for running AI models. The /v1/chat/completions endpoint accepts user-supplied image, audio, and video URLs and fetches them into server memory with no size limits. An unauthenticated attacker can cause complete denial of service by pointing the endpoint at an infinite-streaming HTTP server or a long high-framerate video, exhausting all server memory, disk space, and CPU within seconds.

Technologies: [EricLBuehler Mistral.Rs](https://junglewise.ai/threats/technologies/mistral-rs). Vendors: [crates.io](https://junglewise.ai/threats/vendors/crates-io), [EricLBuehler](https://junglewise.ai/threats/vendors/ericlbuehler).

## Quick answers

**Is This vulnerability exploited in the wild?** No. Junglewise Threat Intelligence has no report of This vulnerability being exploited in the wild.

**How severe is This vulnerability?** High severity, with a CVSS score of 7.5, published 10 September 2026.

**Which products and versions are affected?** mistralrs-server-core (crates.io) <= 0.8.4; EricLBuehler Mistral.Rs <= 0.8.4.

**Is there a fix for This vulnerability?** A patch was published on 0.8.18. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is This vulnerability attacked?** It is attacked over the network, in a hosted service.

**Am I affected?** Check whether you run mistralrs-server-core (crates.io) or EricLBuehler Mistral.Rs at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability comprises three independent resource-exhaustion sinks. First, the image/audio fetch path (util.rs:59–62) uses reqwest::get(url).bytes().await?.to_vec() with no Content-Length check or streaming limit, buffering the entire response into memory. Second, the video fetch path (video.rs:65–69) uses an identical unbounded buffering pattern. Third, the FFmpeg frame extraction (video.rs:225–248) passes num_frames=None, causing every single frame of a video to be extracted to disk as PNG files. The vulnerable /v1/chat/completions route is registered with only DefaultBodyLimit (which applies only to incoming JSON, not outbound reqwest calls) and no authentication middleware. An attacker-controlled server that streams infinitely or a high-framerate long video causes OOM kill (observed in 1.3s with 256 MB limit), disk exhaustion, or CPU saturation.

## Affected products

- EricLBuehler mistral.rs <= 0.8.4

## Timeline

- 2026-06-21: disclosed
- 2026-09-10: advisory
- 0.8.18: patched

## References

- [https://api.github.com/users/EQSTLab](https://api.github.com/users/EQSTLab)
- [https://github.com/EQSTLab](https://github.com/EQSTLab)
- [https://api.github.com/users/EQSTLab/gists%7B/gist_id%7D](https://api.github.com/users/EQSTLab/gists%7B/gist_id%7D)
- [https://api.github.com/users/EQSTLab/repos](https://api.github.com/users/EQSTLab/repos)
- [https://avatars.githubusercontent.com/u/148991397?v=4](https://avatars.githubusercontent.com/u/148991397?v=4)
- [https://api.github.com/users/EQSTLab/events%7B/privacy%7D](https://api.github.com/users/EQSTLab/events%7B/privacy%7D)

## Related threats

- [EricLBuehler Mistral.rs path traversal in calibration_apply](https://junglewise.ai/threats/cve-2026-108940-a-vulnerability-was-found-in-ericlbuehler-mistral-rs-up-to-0-9-3)
- [EricLBuehler mistral.rs server-side request forgery in is_global_ip](https://junglewise.ai/threats/cve-2026-108939-a-vulnerability-has-been-found-in-ericlbuehler-mistral-rs-up-to)
- [mistral.rs symlink following vulnerability in code-exec](https://junglewise.ai/threats/cve-2026-108759-mistral-rs-0-9-0-through-0-9-4-contains-a-link-following)
- [mistral.rs media loader SSRF and arbitrary file read via image_url](https://junglewise.ai/threats/mistral-rs-media-loader-ssrf-and-arbitrary-file-read-via-image-url-669bc2df)