PT-2025-11697 · Mooncake+1 · Mooncake+1

Josephtlucas · Published 2025-03-19 · Updated 2025-03-25 · CVE-2025-29783

Positive Technologies (AI Summary)

CVSS v3.1

9.0

Critical

Base vector

AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions vLLM versions prior to 0.8.0

Description The issue is a remote code execution vulnerability that occurs when vLLM is configured to use Mooncake. This vulnerability allows attackers to execute remote code on distributed hosts due to unsafe deserialization exposed directly over ZMQ/TCP on all network interfaces. The vulnerability impacts any deployments using Mooncake to distribute KV across distributed hosts.

Recommendations To resolve the issue, upgrade to version 0.8.0 or later. As a temporary workaround, consider restricting access to the vulnerable Mooncake integration until a patch is available. Avoid using the pickle.loads() function with untrusted input, and ensure that only trusted sources can send data to the affected service.

Exploit

Fix

RCE

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2025-29783

GHSA-X3M8-F7G5-QHM7

PYSEC-2025-63

Affected Products

Mooncake

Vllm

References · 23

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/29xxx/CVE-2025-29783.json · Exploit
• https://github.com/vllm-project/vllm/commit/288ca110f68d23909728627d3100e5a8db820aa2 · Patch
• https://github.com/vllm-project/vllm/pull/14228 · Vendor Advisory
• https://github.com/vllm-project/vllm/security/advisories/GHSA-x3m8-f7g5-qhm7 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-x3m8-f7g5-qhm7 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-29783 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2025-63 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-29783 · Security Note
• https://github.com/vllm-project/vllm · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/vllm/PYSEC-2025-63.yaml · Note
• https://twitter.com/WolfgangSesin/status/1902395833687142878 · Twitter Post
• https://twitter.com/syedaquib77/status/1904016330359218463 · Twitter Post
• https://twitter.com/CVEnew/status/1902387400258777269 · Twitter Post
• https://twitter.com/threatsbank/status/1904490034926886987 · Twitter Post
• https://t.me/cvedetector/20646 · Telegram Post