PT-2026-53637 · Pypi · Vllm

Publicado 2026-06-29 · Atualizado 2026-06-29

OSV

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

vllm-project vllm version 0.6.0 contains a vulnerability in the distributed training API. The function vllm.distributed.GroupCoordinator.recv object() deserializes received object bytes using pickle.loads() without sanitization, leading to a remote code execution vulnerability.

Maintainer perspective

Note that vLLM does NOT use the code as described in the report on huntr. The problem only exists if you use these internal APIs in a way that exposes them to a network as described. The vllm team was not involved in the analysis of this report and the decision to assign it a CVE.

Correção

Identificadores relacionados

PYSEC-2026-568

Produtos afetados

Vllm

Referências · 9

• https://github.com/vllm-project/vllm · Nota
• https://github.com/vllm-project/vllm/blob/32e7db25365415841ebc7c4215851743fbb1bad1/vllm/distributed/parallel_state.py#L480 · Nota
• https://github.com/vllm-project/vllm/blob/v0.8.1/vllm/distributed/parallel_state.py#L457 · Nota
• https://github.com/github/advisory-database/pull/5444 · Nota
• https://osv.dev/vulnerability/PYSEC-2026-568 · Aviso do Fabricante
• https://huntr.com/bounties/ea75728f-4efe-4a3d-9f53-33f2c908e9f8 · Nota
• https://github.com/advisories/GHSA-pgr7-mhp5-fgjp · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2024-9052 · Nota de Segurança
• https://pypi.org/project/vllm · Nota