CVE-2024-9052

vllm: Remote Code Execution by Pickle Deserialization in vllm-project/vllm

View on CVE.org
Published Mar 20, 2025 CVSS 3.0 · 2.6 Low EPSS n/a KEV · Not listed
Description
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2025-6864 vLLM deserialization vulnerability in vllm.distributed.GroupCoordinator.recv_object
Github GHSA Github GHSA GHSA-pgr7-mhp5-fgjp vLLM deserialization vulnerability in vllm.distributed.GroupCoordinator.recv_object
History
Type Values Removed Values Added
Title Remote Code Execution by Pickle Deserialization in vllm-project/vllm vllm: Remote Code Execution by Pickle Deserialization in vllm-project/vllm
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}
Type Values Removed Values Added
Metrics cvssV3_0

{'score': 9.8, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

 cvssV3_0

{'score': 2.6, 'vector': 'CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N'}
Type Values Removed Values Added
Description vllm-project vllm version 0.6.0 contains a vulnerability in the distributed training API. The function vllm.distributed.GroupCoordinator.recv_object() deserializes received object bytes using pickle.loads() without sanitization, leading to a remote code execution vulnerability. This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Type Values Removed Values Added
References
Metrics threat_severity

None

 threat_severity

Low
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}
Type Values Removed Values Added
Description vllm-project vllm version 0.6.0 contains a vulnerability in the distributed training API. The function vllm.distributed.GroupCoordinator.recv_object() deserializes received object bytes using pickle.loads() without sanitization, leading to a remote code execution vulnerability.
Title Remote Code Execution by Pickle Deserialization in vllm-project/vllm
Weaknesses CWE-502
References
Metrics cvssV3_0

{'score': 9.8, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}
Earlier changes (1)

Subscriptions

No data.

Weaknesses

Sources

Status
REJECTED
Assigner
@huntr_ai
Published
Updated
Apr 10, 2025, 4:17 PM
Reserved
Sep 20, 2024, 6:41 PM

View source JSON

Updated

JSON

Status
Rejected
Published
Mar 20, 2025, 10:15 AM
Modified
Oct 16, 2026, 2:10 PM

View source JSON

Severity
Low
Public date
Mar 20, 2025, 10:09 AM

View source Bugzilla JSON

No data.