PT-2025-18216 · Zeromq+1 · Zeromq+1

Kexinoh · Published 2025-03-19 · Updated 2026-01-11 · CVE-2025-32444

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions vLLM versions 0.6.5 through 0.8.4

Description vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. The issue concerns the use of pickle-based serialization over unsecured ZeroMQ sockets when vLLM is integrated with mooncake, leading to remote code execution. The vulnerable sockets were set to listen on all network interfaces, increasing the likelihood of an attack. vLLM instances without mooncake integration are not vulnerable. This issue has been patched in version 0.8.5.

Recommendations To resolve the issue, update to version 0.8.5 or later. As a temporary workaround, consider disabling the mooncake integration until a patch is applied. Restrict access to the vulnerable ZeroMQ sockets to minimize the risk of exploitation. Avoid using pickle-based serialization over unsecured sockets in the affected API endpoints until the issue is resolved.

Exploit

Fix

RCE

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2025-32444

GHSA-HJ4W-HM2G-P6W5

GHSA-X3M8-F7G5-QHM7

PYSEC-2025-42

Affected Products

Zeromq

Vllm

References · 40

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/32xxx/CVE-2025-32444.json · Exploit
• https://github.com/vllm-project/vllm/security/advisories/GHSA-hj4w-hm2g-p6w5 · Vendor Advisory
• https://github.com/vllm-project/vllm/commit/a5450f11c95847cf51a17207af9a3ca5ab569b2c · Patch
• https://osv.dev/vulnerability/CVE-2025-32444 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2025-42 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-hj4w-hm2g-p6w5 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-x3m8-f7g5-qhm7 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-32444 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-29783 · Security Note
• https://github.com/vllm-project/vllm · Note
• https://github.com/vllm-project/vllm/pull/14228 · Note
• https://github.com/vllm-project/vllm/blob/32b14baf8a1f7195ca09484de3008063569b43c5/vllm/distributed/kv_transfer/kv_pipe/mooncake_pipe.py#L179 · Note
• https://github.com/vllm-project/vllm/commit/288ca110f68d23909728627d3100e5a8db820aa2 · Note
• https://github.com/vllm-project/vllm/security/advisories/GHSA-x3m8-f7g5-qhm7 · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/vllm/PYSEC-2025-63.yaml · Note