SOURCE-LINKED INTELLIGENCE
GHSA-9f8f-2vmf-885j: Data exposure via ZeroMQ on multi-node vLLM deployment
### Impact In a multi-node vLLM deployment, vLLM uses ZeroMQ for some multi-node communication purposes. The primary vLLM host opens an `XPUB` ZeroMQ socket and binds it to ALL interfaces. While the socket is always opened for a multi-node deployment, it is only used when doing tensor parallelism across multiple hosts. Any client with network access to this host can connect to this `XPUB` socket unless its port is blocked by a firewall. Once connected, these arbitrary clients will receive all of the same data broadcasted to all of the secondary vLLM hosts. This data is internal vLLM state info
Read original source ↗ Open in workspace
- recordType
- vulnerability
- status
- active
- evidenceStatus
- reported
- region
- Global
Evidence & attribution
- OSV AI package advisories · 2025-04-29T14:50:59.000Z
- OSV AI package advisories · 2026-07-07T16:02:51.633Z
First collected: 2026-09-20T22:31:48.298Z. This is not the publication date.