CVE-2025-32444 vulnerabilities

Vulnerabilities for packages: py3.10-vllm-cuda-12.6...

CVE-2025-32444

A flaw was found in the vllm component. The affected versions of vllm having vLLM integration with mooncake are vulnerable to remote code execution due to pickle-based serialization over unsecured ZeroMQ sockets. The vulnerable sockets were set to listen on all network interfaces, increasing the...

auralis (>=0.1.0, <=0.2.8.post2), galadriel-node (>=0.0.17, <=0.0.19) potentially affected by CVE-2025-32444 via vllm (0.6.4.post1)

vllm PYPI version 0.6.4.post1 is affected by a known vulnerability. The following packages have a transitive dependency on vllm and may be impacted: - auralis =0.1.0, =0.0.17, =0.0.19 Source cves: CVE-2025-32444 Source advisory: OSV:PYSEC-2025-42...

imitater (>=0.1.2, <=0.1.4) potentially affected by CVE-2025-32444 via vllm (0.2.6)

vllm PYPI version 0.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on vllm and may be impacted: - imitater =0.1.2, =0.1.4 Source cves: CVE-2025-32444 Source advisory: OSV:PYSEC-2025-42...

CVE-2025-32444

vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Versions starting from 0.6.5 and prior to 0.8.5, having vLLM integration with mooncake, are vulnerable to remote code execution due to using pickle based serialization over unsecured ZeroMQ sockets. The vulnerab...

CVE-2025-32444

creationtimestamp| type| source ---|---|--- 2025-04-30 01:07:10+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114424232674350194 2025-04-30 01:48:36+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114424395593995699 2025-04-30 03:30:38+00:00|...

CVE-2025-32444

vLLM (0.6.5–0.8.4) with mooncake integration is vulnerable to remote code execution due to pickle-based serialization over unsecured ZeroMQ sockets that were listening on all interfaces. This could be exploited remotely; non-mooncake deployments are not affected. The issue is fixed in vLLM 0.8.5....

CVE-2025-32444 vLLM Vulnerable to Remote Code Execution via Mooncake Integration

vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Versions starting from 0.6.5 and prior to 0.8.5, having vLLM integration with mooncake, are vulnerable to remote code execution due to using pickle based serialization over unsecured ZeroMQ sockets. The vulnerab...

CVE-2025-32444 vLLM Vulnerable to Remote Code Execution via Mooncake Integration

vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Versions starting from 0.6.5 and prior to 0.8.5, having vLLM integration with mooncake, are vulnerable to remote code execution due to using pickle based serialization over unsecured ZeroMQ sockets. The vulnerab...

bespokelabs-curator (>=0.1.15rc1, <=0.1.15.post1), deepseek-coder (>=0.1.0a0, <=0.1.0) +24 more potentially affected by CVE-2025-32444 via vllm (>=0.6.6.post1, <=0.8.4)

vllm PYPI version =0.6.6.post1, =0.1.15rc1, =0.1.0a0, =0.0.2, =0.1.1, =0.1.10, =0.0.2, =0.1.1, =0.2.0, =2.0.0a2, =0.0.15, =0.0.7, =0.1.0, =0.3.0 and more Source cves: CVE-2025-32444 Source advisory: GHSA-HJ4W-HM2G-P6W5...