mistral.rs: Unbounded Remote Media Fetch and Video Frame Expansion DoS

Published September 10, 2026 GHSA-m3wp-48jr-vr4g

mistral.rs servers can be taken offline by specially crafted media requests. An attacker can consume the server's memory, storage, or processing power until it stops serving users.

Severity
HighCVSS 7.5
Fix
Fixed in 0.8.18Fix recorded yesterday
Affected versions
0.8.4 or older
Affects
mistralrs-server-core

How it works

  • A remote request can make the server download an image, audio file, or video from an attacker-controlled address.
  • The server stores the entire download without a size limit.
  • Video requests can also make it save every video frame when no frame limit is set.
  • This can consume memory, storage, or processing power until the service becomes unavailable.

What to do

Check the installed mistralrs-server-core version and compare it with the advisory's affected range of 0.8.4 or earlier.

Update mistralrs-server-core to the explicitly supported fixed version 0.8.18.

Technical details

Affected software: mistralrs-server-core

The POST /v1/chat/completions endpoint accepts remote image, audio, and video URLs without limiting downloaded bytes. Video processing can also extract every frame when num_frames is None, causing resource exhaustion and denial of service.

References

View Original Source