vLLMPYSEC-2026-4003
vLLM: denial of service
UnratedCVE-2026-78684 · Published Aug 25, 2026 · updated Sep 30, 2026
vLLM before 0.27.0 fails to properly classify DeepStream as a GPU backend and omits pixel-limit enforcement in its decode path. Unauthenticated attackers can activate DeepStream at request time to initialize the process-wide GPU decode pool and submit video that bypasses resource controls, causing partial denial of service for concurrent requests.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| vllm PyPI | < 0.27.0 | 0.27.0 |
Details and references
- CVSS 4.0
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Severity from
- no source yet
- Also known as
- CVE-2026-78684, GHSA-cqm8-jxg6-fqfq
More vLLM advisories
All vLLM| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Sep 8 | vLLM: Cross-User Data Leak Vulnerability Medium5.3Sep 8 | Medium5.3 | 0.27.0 |
| Sep 4 | vLLM: Incomplete CVE-2025-62164 remediation can be bypassed by concurrent prompt partsMediumSep 4 | Medium | 0.26.0 |
| Sep 4 | vLLM: denial of serviceMedium5.3Sep 4 | Medium5.3 | 0.26.0 |
| Sep 4 | vLLM: Unauthenticated Internal Path and Username Disclosure via Validation Error MessagesMedium5.3Sep 4 | Medium5.3 | 0.26.0 |
| Sep 4 | vLLM: Derender endpoints decode caller-supplied GenerateResponse token IDs without output boundsMedium4.3Sep 4 | Medium4.3 | 0.26.0 |
| Aug 13 | vLLM: Completion prompt lists fan out into unbounded engine requestsMedium6.5Aug 13 | Medium6.5 | 0.26.0 |