Reference page — cumulative record through Thursday, October 8, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2026-69147

CVE-2026-69147MEDIUM

vllm-project vllm — vLLM: Request-selected PyNvVideoCodec GPU decode bypasses static VRAM reservation

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   L   N  U  N  N  H    6.5   .0055   44.1     —

AFFECTED
  Product  Versions    Fixed
  vllm     < 0.28.0 –  —

TIMELINE
  Aug 3   Reserved by GitHub_M
  Sep 16  Published (CNA: GitHub_M)
  Oct 7   EXPLOIT PUBLISHED — CVE-2026-69147 (vllm-project vllm). Public exploit reference added.

CWE-400, CWE-770 · CNA: GitHub_M · CVSS v3.1 · 4 references · NVD status: Analyzed

Description

vLLM is an inference and serving engine for large language models. Prior to 0.28.0, request bodies for Chat Completions and Responses can set media_io_kwargs.video.video_backend to pynvvideocodec, and MediaConnector.fetch_video forwards that choice to VideoMediaIO even when startup configuration selected a software decoder. The engine's _reserve_mm_ipc_gpu_memory logic budgets decoder memory only from static configuration, so the request-selected VIDEO_LOADER_REGISTRY backend can create a CUDA context, decoder surfaces, and decoded-frame allocations that were not removed from the engine's KV-cache budget. An attacker able to submit video requests to a video-capable GPU deployment with PyNvVideoCodec installed can exhaust shared GPU memory, causing request failures, worker crashes, or denial of service. The first release containing the fix is version 0.28.0.

Lifecycle

Complete event history — 3 events, chronological
Date	Event	Detail
August 3, 2026	Reserved	Reserved by GitHub_M
September 16, 2026	Published	Published (CNA: GitHub_M)
October 7, 2026	EXPLOIT PUBLISHED	EXPLOIT PUBLISHED — CVE-2026-69147 (vllm-project vllm). Public exploit reference added.

Affected

Affected products and packages — 1 row
Vendor	Product / Package	Ecosystem	Version introduced	Fixed
vllm-project	vllm	—	< 0.28.0	—

Weaknesses

CWE-400 · CWE-770

References (4)

https://github.com/vllm-project/vllm/commit/283893c72292ede38d277e3cd2b9b64c3e4f1dda [Patch]
https://github.com/vllm-project/vllm/commit/ba22152096b2484faa3579624a253d54804d876d [Patch]
https://github.com/vllm-project/vllm/pull/47259 [Issue Tracking, Patch]
https://github.com/vllm-project/vllm/security/advisories/GHSA-8pw2-6jv3-mj5j [Exploit, Vendor Advisory]

Authoritative record: CVE-2026-69147 at cve.org

Vendors: vllm-project

Weaknesses: CWE-400 · CWE-770

About this page

This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2026-69147 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Thursday, October 8, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.