CVE-2024-11041criticalCWE-502

CVE-2024-11041: critical vulnerability in vllm-project/vllm

Remote Code Execution in vllm-project/vllm

Published

Follow this CVE+ Monitor vllm-project/vllm+ Monitor vllm

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.8epss 1.7%
In short

A vulnerability in vllm v0.6.2 allows attackers to execute arbitrary code on a server by sending a specially crafted message. The application unsafely deserializes untrusted data, giving attackers complete control over the affected system.

Technical detail

The MessageQueue.dequeue() function uses pickle.loads() on untrusted socket data without validation, enabling object injection attacks. An attacker with network access to the MessageQueue can send a malicious serialized payload that executes arbitrary code during deserialization with the privileges of the vllm process.

Summary generated and translated by AI from the official description.
vllm-project vllm version v0.6.2 contains a vulnerability in the MessageQueue.dequeue() API function. The function uses pickle.loads to parse received sockets directly, leading to a remote code execution vulnerability. An attacker can exploit this by sending a malicious payload to the MessageQueue, causing the victim's machine to execute arbitrary code.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
vllm-project · vllm-project/vllm
Related CVEs — vllm-project/vllm

In the same product, most dangerous first.

CVE-2024-9053CRITICALRemote Code Execution in vllm-project/vllmEPSS 1.4%CVE-2026-4944HIGHHardcoded trust_remote_code=True in vllm-project/vllm Bypasses User Security ControlEPSS 0.7%CVE-2026-5497HIGHUnbounded Frame Count in video/jpeg Base64 Data URL Processing Leads to OOM DoS in vllm-project/vllmEPSS 0.5%