{
 "id": "AIR-2026-0809",
 "slug": "cve-2026-55646-vllm-speech-to-text-enforces-size-limit-after",
 "title": "CVE-2026-55646: vLLM speech-to-text enforces size limit after full file read",
 "summary": "The audio transcription and translation endpoints in vLLM read uploaded files into memory entirely before enforcing the maximum file size limit. This design can lead to memory exhaustion and denial of service through oversized uploads.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "vLLM"
 ],
 "incident_date": "2026-07-17",
 "incident_date_precision": "day",
 "first_reported": "2026-07-06",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55646",
   "publisher": "NVD",
   "title": "CVE-2026-55646: vLLM is an inference and serving engine for large language models.",
   "published_at": "2026-07-06"
  },
  {
   "url": "https://github.com/advisories/GHSA-v82g-2437-67m2",
   "publisher": "GitHub Advisory Database",
   "title": "CVE-2026-55646: vLLM: Speech-to-text upload size limit is enforced after full UploadFile read",
   "published_at": "2026-07-17"
  }
 ],
 "source_count": 2,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_ghsa",
 "tags": [
  "CVE-2026-55646",
  "vllm",
  "denial-of-service"
 ],
 "created_at": "2026-10-18T07:00:14.101Z",
 "updated_at": "2026-10-18T10:04:21.885Z"
}