Remote Code Execution (RCE)

🗓️ 13 May 2025 04:16:15Reported by Veracode Vulnerability DatabaseType

vllm is vulnerable to Remote Code Execution due to unsafe use of pickle with untrusted data.

Reporter	Title	Published	Views	Family All 18
Chainguard	CVE-2025-30165 vulnerabilities	10 Jun 202519:15	–	cgr
Circl	CVE-2025-30165	6 May 202517:13	–	circl
CNNVD	vLLM 代码问题漏洞	6 May 202500:00	–	cnnvd
CVE	CVE-2025-30165	6 May 202516:53	–	cve
Cvelist	CVE-2025-30165 Remote Code Execution Vulnerability in vLLM Multi-Node Cluster Configuration	6 May 202516:53	–	cvelist
EUVD	EUVD-2025-13625	3 Oct 202520:07	–	euvd
Github Security Blog	Remote Code Execution Vulnerability in vLLM Multi-Node Cluster Configuration	6 May 202516:38	–	github
NVD	CVE-2025-30165	6 May 202517:16	–	nvd
OSV	CGA-997G-P8F5-5C82	10 Jun 202519:39	–	osv
OSV	CGA-FPPW-Q354-9624	29 Jan 202600:50	–	osv

Vulners

Node

vllm vllmRange0.5.2–0.8.5python

vllm vllmMatch0.5.2python

vllm vllmMatch0.5.3python

vllm vllmMatch0.5.3.post1python

vllm vllmMatch0.5.4python

vllm vllmMatch0.5.5python

vllm vllmMatch0.6.0python

vllm vllmMatch0.6.1python

vllm vllmMatch0.6.1.post1python

vllm vllmMatch0.6.1.post2python

vllm vllmMatch0.6.2python

vllm vllmMatch0.6.3python

vllm vllmMatch0.6.3.post1python

vllm vllmMatch0.6.4python

vllm vllmMatch0.6.4.post1python

vllm vllmMatch0.6.5python

vllm vllmMatch0.6.6python

vllm vllmMatch0.6.6.post1python

vllm vllmMatch0.7.0python

vllm vllmMatch0.7.1python

vllm vllmMatch0.7.2python

vllm vllmMatch0.7.3python

vllm vllmMatch0.8.0python

vllm vllmMatch0.8.1python

vllm vllmMatch0.8.2python

vllm vllmMatch0.8.3python

vllm vllmMatch0.8.4python

vllm vllmMatch0.8.5.post1python

vllm vllmMatch0.9.0python

vllm vllmMatch0.9.0.1python

vllm vllmMatch0.9.1python

vllm vllmMatch0.9.2python

Source	Link
github	www.github.com/vllm-project/vllm/security/advisories/GHSA-9pcc-gvx5-r5wm
github	www.github.com/vllm-project/vllm/blob/c21b99b91241409c2fdf9f3f8c542e8748b317be/vllm/distributed/device_communicators/shm_broadcast.py
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-30165
github	www.github.com/vllm-project/vllm/blob/c21b99b91241409c2fdf9f3f8c542e8748b317be/vllm/distributed/device_communicators/shm_broadcast.py
github	www.github.com/vllm-project/vllm

13 Dec 2025 07:35Current

8.1High risk

Vulners AI Score8.1

CVSS 3.18

EPSS0.00432

SSVC