CVE-2026-115912

A flaw was found in vLLM. In scale-out deployments utilizing shared-memory multimodal caching, worker nodes fail to validate shared-memory references provided in incoming requests. An authenticated remote attacker can exploit this vulnerability by submitting forged memory references pointing to...

CVE-2026-115912

vLLM is an inference and serving engine for large language models. Prior to 0.32.0, an authenticated caller can place forged shared-memory address and monotonicid values in public multimodal features.kwargsdata. In scale-out deployments with shared-memory multimodal caching enabled, workers trust...

EUVD-2026-110022

vLLM is an inference and serving engine for large language models. Prior to 0.32.0, an authenticated caller can place forged shared-memory address and monotonicid values in public multimodal features.kwargsdata. In scale-out deployments with shared-memory multimodal caching enabled, workers trust...