Vulnerability Reportvllm/vllm-openai:v0.24.0

This image carries significant risk; production deployment is highly discouraged without strict compensating controls. An attacker could exploit the exposed FFmpeg libraries via CVE-2026-40962 and CVE-2022-48434 to trigger integer overflows, out-of-bounds writes, or use-after-free, potentially achieving remote code execution within the container. The large number of exposed high-severity vulnerabilities (52 at severity >= 7) means the attack surface is substantial, especially if the container is internet-facing. While post-exploit findings are low severity, the exposed vulnerabilities alone warrant caution and rigorous access controls.