CVE-2024-9053

CRITICAL9.8EPSS 10.0%

vLLM allows Remote Code Execution by Pickle Deserialization via AsyncEngineRPCServer() RPC server entrypoints

Published: 3/20/2025Modified: 5/21/2026

Description

vllm-project vllm version 0.6.0 contains a vulnerability in the AsyncEngineRPCServer() RPC server entrypoints. The core functionality run_server_loop() calls the function _make_handler_coro(), which directly uses cloudpickle.loads() on received messages without any sanitization. This can result in remote code execution by deserializing malicious pickle data.

Affected packages (2)

PyPI/vllmfrom 0, <= 0.6.0
PyPI/vllmfrom 0, <= 0.6.0

CVSS scores

Source	Version	Severity	Vector
osv	CVSS 3.1	CRITICAL9.8	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References (3)

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2024-9053
PATCHhttps://github.com/vllm-project/vllm
WEBhttps://huntr.com/bounties/75a544f3-34a3-4da0-b5a3-1495cb031e09