AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

vLLMGHSA-cj47-qj6g-x7r4

vLLM allows Remote Code Execution by Pickle Deserialization via AsyncEngineRPCServer() RPC server entrypoints

vLLM

CVE-2024-9053 · Published Mar 20, 2025 · updated Aug 7, 2026

Critical9.8
No fix yet
GitHub advisory

vllm-project vllm version 0.6.0 contains a vulnerability in the AsyncEngineRPCServer() RPC server entrypoints. The core functionality run_server_loop() calls the function _make_handler_coro(), which directly uses cloudpickle.loads() on received messages without any sanitization. This can result in remote code execution by deserializing malicious pickle data.

Affected versions

PackageAffectedFixed in
vllm
PyPI
<= 0.6.0No fix yet
Details and references
CVSS 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity from
GitHub (reviewed advisory)
Weakness
CWE-502, CWE-78
Also known as
CVE-2024-9053, PYSEC-2025-222

More vLLM advisories

All vLLM
Critical 9.8Apr 23, 2025vLLM: code executionGHSA-ggpf-24jw-3fcwfixed in 0.8.0Medium 6.5Apr 15, 2025vLLM vulnerable to Denial of Service by abusing xgrammar cacheGHSA-hf3c-wxg2-49q9fixed in 0.8.4Critical 9.8Mar 20, 2025vLLM deserialization vulnerability in vllm.distributed.GroupCoordinator.recv_objectCVE-2024-9052no fix yetCritical 9.8Mar 20, 2025vLLM Deserialization of Untrusted Data vulnerabilityCVE-2024-11041no fix yetCritical 9.0Mar 19, 2025vLLM Allows Remote Code Execution via Mooncake IntegrationCVE-2025-29783fixed in 0.8.0Medium 6.5Mar 19, 2025vLLM denial of service via outlines unbounded cache on diskCVE-2025-29770fixed in 0.8.0