vLLM discloses remote denial-of-service vulnerability due to insufficient input validation in multimodal processors
vLLM：多模态处理器输入验证不足可导致拒绝服务
vLLM's multimodal requests can pass insufficiently validated processor parameters to image and video processors, leading to excessive resource allocation, memory exhaustion in the shared serving process, and interruption. The issue involves processors such as Isaac, InternVL, H2OVL, and shared input boundaries; deployments without an external authentication layer may be triggered by unauthenticated clients. Maintainers fixed this by rejecting request-level processor overrides by default, requiring trusted clients to explicitly enable them. The advisory states that this request-level field was introduced in v0.7.3, with the fixed version being 0.31.0.
The vLLM multimodal processor has a remote denial-of-service path, and deployers need to assess the actual protection provided by the API key and the external authentication layer.