Vulnerabilities3 min read
vLLM CVSS 9.8 Flaw Lets Attackers Own AI Servers via Video
CVE-2026-22778 chains a heap leak and buffer overflow in vLLM's video processing to achieve full RCE on AI inference servers. Patch to 0.14.1 now.
Marcus ChenFeb 7, 2026