PT-2025-12093

Name of the Vulnerable Software and Affected Versions vllm-project vllm version v0.6.2 Description The issue is related to a remote code execution vulnerability in the MessageQueue.dequeue API function. This function uses pickle.loads to parse received sockets directly, allowing an attacker to...