Tools AI Risk Radar ai-incident-0159
Incident record
vLLM fixes excessive video loading in Qwen models
- Severity
- Medium
- Status
- Patched
- Type
- Infra Vuln
- Target
- vllm
- Actor
- researcher
- CVE
- CVE-2026-105758
What happened
A request to a Qwen2-VL or Qwen3-VL deployment could raise video sampling limits and consume excessive server memory. The affected sampler bypassed the existing frame-count ceiling.
vllm: affected >= 0.24.0, < 0.30.0; fixed in 0.30.0. The date shown is the maintainer’s original disclosure date. Its advisory assigns 5.3 under CVSS 3.1.
Sources
- Primary disclosuregithub.com/vllm-project/vllm/security/advisories/GHSA-x6mc-6…
One record from the AI Risk Radar, maintained by the Security Desk.Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 13 October 2026