vLLM project vLLM at a glance
A CVSS 9.8 chain in vLLM 0.8.3 to 0.14.0 lets an attacker send a video_url pointing to a crafted video and run code on servers that host video models. Upgrade to 0.14.1.
vLLM project vLLM: status
- Affected
- vLLM 0.8.3 up to but not including 0.14.1, when serving a video model
- CVE identifiers
- Status as of
- Discovered by
- Reporter dan-sec-ops (credited in the vLLM advisory)
What changed with vLLM project vLLM
On February 2, 2026, the vLLM project published GHSA-4r2x-xpjr-7cvv for CVE-2026-22778, rated critical with a CVSS 3.1 score of 9.8. It affects vLLM 0.8.3 up to but not including 0.14.1, the popular open-source engine many teams use to serve LLMs behind an OpenAI-compatible API.
The advisory describes a chain of two bugs. Error messages for invalid images leaked a heap memory address, weakening ASLR protections, and a heap overflow in video decoding through the FFmpeg build bundled with OpenCV could then be triggered. An attacker sends a request with a video_url pointing to a malicious video. The advisory says default installs need no authentication, and the invocations route can be reached even when an API key is set.
Only deployments that serve a video-capable model are affected. The advisory lists no workaround; the fix is to upgrade to vLLM 0.14.1, which contains the patches.
How to fix it: vLLM project vLLM
Advisories
- GHSA-4r2x-xpjr-7cvv (opens in a new tab)github.com
- NVD CVE-2026-22778 (opens in a new tab)nvd.nist.gov
Where to compare vLLM project vLLM
Independent leaderboards and official resources for comparing this model yourself. Rankings change often; each site shows its own current data.
Why vLLM project vLLM matters for businesses
Companies self-hosting open models for privacy or cost reasons often run vLLM on GPU servers that also hold model weights, cloud credentials, and customer prompts. If you serve multimodal models, check your vLLM version and avoid exposing the API directly to the internet.
Sources for this story
- vLLM RCE In Video Processing (GHSA-4r2x-xpjr-7cvv) (opens in a new tab)Official
vLLM project on GitHub · github.com
- CVE-2026-22778 Detail (opens in a new tab)Official
NIST National Vulnerability Database · nvd.nist.gov
- vLLM v0.14.1 release (opens in a new tab)Official
vLLM project on GitHub · github.com
Last verified: . IA Compa summarizes public announcements for business readers. We are not affiliated with the companies mentioned. Always confirm details, pricing, and availability with the official source.
- #security
- #cve
- #vllm
- #model-serving
- #multimodal
- #self-hosting