PT-2025-12093 · Vllm · Vllm

Published 2025-03-20 · Updated 2025-03-21 · CVE-2024-11041

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions vllm-project vllm version v0.6.2

Description The issue is related to a remote code execution vulnerability in the MessageQueue.dequeue() API function. This function uses pickle.loads to parse received sockets directly, allowing an attacker to exploit this by sending a malicious payload to the MessageQueue, causing the victim's machine to execute arbitrary code. The API endpoint affected is the MessageQueue.dequeue() function, which uses the pickle.loads method to deserialize received data.

Recommendations For version v0.6.2, consider disabling the MessageQueue.dequeue() function until a patch is available to prevent exploitation. Restrict access to the MessageQueue module to minimize the risk of exploitation. Avoid using the pickle.loads method to parse received sockets directly in the MessageQueue.dequeue() function until the issue is resolved.

Exploit

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2024-11041

GHSA-5VQR-WPRC-CPP7

Affected Products

Vllm

References · 9

• 🔥 https://huntr.com/bounties/00136195-11e0-4ad0-98d5-72db066e867f · Exploit
• https://osv.dev/vulnerability/CVE-2024-11041 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-5vqr-wprc-cpp7 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-11041 · Security Note
• https://github.com/vllm-project/vllm · Note
• https://github.com/vllm-project/vllm/blob/7193774b1ff8603ad5bf4598e5efba0d9a39b436/vllm/distributed/device_communicators/shm_broadcast.py#L441-L443 · Note
• https://twitter.com/WolfgangSesin/status/1902677121928954212 · Twitter Post
• https://twitter.com/CVEnew/status/1902671088967991344 · Twitter Post
• https://twitter.com/cybercronai/status/1903115005400064023 · Twitter Post