HighVulnerabilityLLM-specific
CVE-2026-115912: vLLM arbitrary Python execution via forged shared-memory multimodal data
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-115912
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
Summary
vLLM versions before 0.32.0 are affected. An authenticated caller can place forged shared-memory address and monotonic_id values in public multimodal features.kwargs_data. In scale-out deployments with shared-memory multimodal caching enabled, workers pass attacker-selected bytes to pickle.loads(), allowing arbitrary Python execution even when insecure serialization is disabled.
Mitigation
Fixed in version 0.32.0.
Topics
Related items
- LowThe RealReal won’t let AI agents hog designer clothingSimilar attack · The Verge (AI)
- MediumOpenAI, Anthropic disclosures spotlight growing AI containment challengeSimilar attack · CSO Online
- MediumBias in Qwen3-Coder ModelSimilar attack · Schneier on Security
- MediumCVE-2026-116104: Sony Neural Network Libraries code injection in NNP ConverterSimilar attack · NVD/CVE Database
- MediumCVE-2026-116103: Sony Neural Network Libraries code injection in encode param command handlerSimilar attack · NVD/CVE Database