PT-2025-34260 · Vllm+1 · Vllm+1

Published 2025-08-21 · Updated 2025-08-25 · CVE-2025-9141

Positive Technologies · (AI Summary)

CVSS v3.1

8.8

High

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: vLLM (affected versions not specified)

Description: An unsafe deserialization allows any authenticated user to execute arbitrary code on the server if they are able to get the model to pass the code as an argument to a tool call. The issue resides in the Qwen3 Coder tool parser, which uses Python’s eval() function to parse tool call parameters during the parameter conversion process when handling unknown data types. This code path is reached when tool calling is enabled and the qwen3 coder parser is specified.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2025-9141

GHSA-79J6-G2M3-JGFW

Affected Products

Qwen3 Coder

Vllm

References · 7

• https://osv.dev/vulnerability/GHSA-79j6-g2m3-jgfw · Vendor Advisory
• https://github.com/vllm-project/vllm · Note
• https://github.com/vllm-project/vllm/pull/21396 · Note
• https://github.com/vllm-project/vllm/commit/4594fc3b281713bd3d7634405b4a1393af40d294 · Note
• https://github.com/vllm-project/vllm/security/advisories/GHSA-79j6-g2m3-jgfw · Note
• https://twitter.com/CheckmarxZero/status/1959012042888589438 · Twitter Post
• https://twitter.com/CheckmarxZero/status/1959964125095723107 · Twitter Post