EUVD-2025-6725

Malicious code in bioql PyPI...

Remote Code Execution (RCE)

vllm is vulnerable to Remote Code Execution RCE. The vulnerability is due to unsafe deserialization exposed over ZMQ/TCP on all network interfaces when vLLM is configured to use Mooncake, allowing an attacker to execute arbitrary code on distributed hosts...

CVE-2025-29783 vLLM Allows Remote Code Execution via Mooncake Integration

vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. When vLLM is configured to use Mooncake, unsafe deserialization exposed directly over ZMQ/TCP on all network interfaces will allow attackers to execute remote code on distributed hosts. This is a remote code...

CVE-2025-29783

vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. When vLLM is configured to use Mooncake, unsafe deserialization exposed directly over ZMQ/TCP on all network interfaces will allow attackers to execute remote code on distributed hosts. This is a remote code...

CVE-2025-29783: Deserialization of Untrusted Data

vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. When vLLM is configured to use Mooncake, unsafe deserialization exposed directly over ZMQ/TCP on all network interfaces will allow attackers to execute remote code on distributed hosts. This is a remote code...

PT-2025-11697

Name of the Vulnerable Software and Affected Versions vLLM versions prior to 0.8.0 Description The issue is a remote code execution vulnerability that occurs when vLLM is configured to use Mooncake. This vulnerability allows attackers to execute remote code on distributed hosts due to unsafe...

PT-2020-22034

Name of the Vulnerable Software and Affected Versions ZeroMQ affected versions not specified Description The issue is related to a heap buffer overflow error. Technical details about the error include a crash type of Heap-buffer-overflow WRITE and a crash state involving several functions: zmq::t...

PT-2020-6244

Name of the Vulnerable Software and Affected Versions libzmq version 4.3.3 Description The issue is related to a heap-based buffer overflow in the zmq::tcp read function of the libzmq library, which is part of the ZeroMQ asynchronous messaging library. This can lead to a denial of service. The...