CVE-2026-114054: vLLM cache aliasing lets attackers collide shared cache keys

Summary

CVE-2026-114054 affects vLLM before 0.31.0 and is a cache aliasing flaw. An authenticated attacker can supply caller-controlled values, such as an EXIF ImageID or cache_salt, to collide shared cache keys. An attacker can set a UUID EXIF ImageID to receive another request's cached processed media, or match cache_salt to a LoRA name to reuse first-block KV state.

Mitigation

Fixed in 0.31.0 (vLLM versions before 0.31.0 are affected).

Topics

• Inference infrastructure

Related items

• HighCVE-2026-114053: vLLM arbitrary Python execution via mm_processor_kwargs code_revisionSimilar attack · NVD/CVE Database
• LowCVE-2026-114049: vLLM cross-request mask leak in InputBatch.condense() via /invocationsSimilar attack · NVD/CVE Database
• HighCVE-2026-112380 - Missing authorization in the WhatsApp channel in Kiro CrewSimilar attack · AWS Security Bulletins
• MediumFrom Phishing to LLMjacking: Threat Actors Targeting Cloud Billing Accounts for LLM UsageSimilar attack · Wiz Research Blog
• MediumGHSA-rvq5-wwqv-78pq: MCP TypeScript SDK: Server bearer authentication accepted tokens issued for another serviceSimilar attack · GitHub Advisory Database