SOURCE-LINKED INTELLIGENCE

GHSA-cj47-qj6g-x7r4: vLLM allows Remote Code Execution by Pickle Deserialization via AsyncEngineRPCServer() RPC server entrypoints

OSV AI package advisories · observation · Mar 20, 2025 · UTC

vllm-project vllm version 0.6.0 contains a vulnerability in the AsyncEngineRPCServer() RPC server entrypoints. The core functionality run_server_loop() calls the function _make_handler_coro(), which directly uses cloudpickle.loads() on received messages without any sanitization. This can result in remote code execution by deserializing malicious pickle data.

Read original source ↗ Open in workspace

recordType: vulnerability
status: active
evidenceStatus: reported
region: Global

Evidence & attribution

OSV AI package advisories · 2025-03-20T12:32:50.000Z

First collected: 2026-09-20T22:31:48.298Z. This is not the publication date.