vLLM Pod OOMKilled/CrashLoopBackOff Burst Correlated with Multimodal Requests

Ibrahim Saud@tektrix

•updated Jun 24, 2026•0•0•6

Detects repeated restarts of vLLM pods (due to OOMKilled, CrashLoopBackOff, or other failure reasons) that are correlated with a burst of multimodal requests. This pattern can indicate a denial-of-service attack, resource exhaustion, or exploitation of vulnerabilities (such as CVE-2026-22778) targeting the vLLM service, potentially leading to service instability or compromise.