CVE-2026-73560: vLLM: SSRF + arbitrary local file read in MiMoV2OmniMultiModalProcessor `_fetch_image` and audio loader bypass MediaConnector protections
vLLM is an inference and serving engine for large language models. Prior to 0.26.0, the MiMoV2OmniMultiModalProcessor in vllm/transformersutils/processors/mimov2omni.py passes attacker-controlled image and audio strings through fetchimage, requests.get, and Image.open instead of MediaConnector, bypassing allowedmediadomains and allowedlocalmediapath protections and allowing server-side requests and reads of arbitrary files accessible to the vLLM process. This issue is fixed in version 0.26.0.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
vllm MiMoV2OmniMultiModalProcessor (vllm/transformers_utils/processors/mimo_v2_omni.py)to a version that resolves this vulnerability.Fixed in 0.26.0
Event History
Frequently Asked Questions
What is the severity of CVE-2026-73560?
The severity of CVE-2026-73560 is rated as medium with a score of 6.5.
What vulnerability types are associated with CVE-2026-73560?
CVE-2026-73560 is associated with Server-Side Request Forgery (SSRF) and arbitrary local file read.
How do I fix CVE-2026-73560?
To fix CVE-2026-73560, update to the latest version of vLLM, at least version 0.26.0.
What components are affected by CVE-2026-73560?
CVE-2026-73560 affects the MiMoV2OmniMultiModalProcessor in the vllm software.
What is the potential impact of CVE-2026-73560?
The potential impact of CVE-2026-73560 includes the ability for an attacker to bypass MediaConnector protections and manipulate local file reads.