SOURCE-LINKED INTELLIGENCE
GHSA-mrw7-hf4f-83pf: vLLM deserialization vulnerability leading to DoS and potential RCE
### Summary A memory corruption vulnerability that leading to a crash (denial-of-service) and potentially remote code execution (RCE) exists in vLLM versions 0.10.2 and later, in the Completions API endpoint. When processing user-supplied prompt embeddings, the endpoint loads serialized tensors using torch.load() without sufficient validation. Due to a change introduced in PyTorch 2.8.0, sparse tensor integrity checks are disabled by default. As a result, maliciously crafted tensors can bypass internal bounds checks and trigger an out-of-bounds memory write during the call to to_dense(). This
Read original source ↗ Open in workspace
- recordType
- vulnerability
- status
- active
- evidenceStatus
- reported
- region
- Global
Evidence & attribution
- OSV AI package advisories · 2025-11-20T20:59:34.000Z
- OSV AI package advisories · 2026-07-07T16:03:10.617Z
First collected: 2026-09-20T22:31:48.298Z. This is not the publication date.