Cache Poisoning

🗓️ 11 Feb 2025 09:48:12Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 6 Views

vLLM is vulnerable to Cache Poisoning due to hash collisions affecting prefix caching.

Reporter	Title	Published	Views	Family All 18
Chainguard	CVE-2025-25183 vulnerabilities	7 Feb 202520:15	–	cgr
Circl	CVE-2025-25183	7 Feb 202523:01	–	circl
CNNVD	vLLM 安全漏洞	7 Feb 202500:00	–	cnnvd
CVE	CVE-2025-25183	7 Feb 202519:59	–	cve
Cvelist	CVE-2025-25183 vLLM using built-in hash() from Python 3.12 leads to predictable hash collisions in vLLM prefix cache	7 Feb 202519:59	–	cvelist
EUVD	EUVD-2025-4074	3 Oct 202520:07	–	euvd
Github Security Blog	vLLM uses Python 3.12 built-in hash() which leads to predictable hash collisions in prefix cache	6 Feb 202520:00	–	github
Microsoft CVE	vLLM using built-in hash() from Python 3.12 leads to predictable hash collisions in vLLM prefix cache	3 Sep 202522:24	–	mscve
NVD	CVE-2025-25183	7 Feb 202520:15	–	nvd
OSV	CGA-V9J4-3JR2-RW8V	29 Jan 202600:48	–	osv

Vulners

Node

vllm vllmRange0.4.0.post1–0.7.1python

vllm vllmMatch0.0.1python

vllm vllmMatch0.1.0python

vllm vllmMatch0.1.1python

vllm vllmMatch0.1.2python

vllm vllmMatch0.1.3python

vllm vllmMatch0.1.4python

vllm vllmMatch0.1.5python

vllm vllmMatch0.1.6python

vllm vllmMatch0.1.7python

vllm vllmMatch0.2.0python

vllm vllmMatch0.2.1python

vllm vllmMatch0.2.1.post1python

vllm vllmMatch0.2.2python

vllm vllmMatch0.2.3python

vllm vllmMatch0.2.4python

vllm vllmMatch0.2.5python

vllm vllmMatch0.2.6python

vllm vllmMatch0.2.7python

vllm vllmMatch0.3.0python

vllm vllmMatch0.3.1python

vllm vllmMatch0.3.2python

vllm vllmMatch0.3.3python

vllm vllmMatch0.4.0python

vllm vllmMatch0.4.0.post1python

vllm vllmMatch0.4.1python

vllm vllmMatch0.4.2python

vllm vllmMatch0.4.3python

vllm vllmMatch0.5.0python

vllm vllmMatch0.5.0.post1python

vllm vllmMatch0.5.1python

vllm vllmMatch0.5.2python

vllm vllmMatch0.5.3python

vllm vllmMatch0.5.3.post1python

vllm vllmMatch0.5.4python

vllm vllmMatch0.5.5python

vllm vllmMatch0.6.0python

vllm vllmMatch0.6.1python

vllm vllmMatch0.6.1.post1python

vllm vllmMatch0.6.1.post2python

vllm vllmMatch0.6.2python

vllm vllmMatch0.6.3python

vllm vllmMatch0.6.3.post1python

vllm vllmMatch0.6.4python

vllm vllmMatch0.6.4.post1python

vllm vllmMatch0.6.5python

vllm vllmMatch0.6.6python

vllm vllmMatch0.6.6.post1python

vllm vllmMatch0.7.0python

Source	Link
github	www.github.com/python/cpython/pull/99541
github	www.github.com/vllm-project/vllm/security/advisories/GHSA-rm76-4mrf-v9r8
github	www.github.com/vllm-project/vllm/pull/12621
github	www.github.com/pypa/advisory-database/tree/main/vulns/vllm/PYSEC-2025-62.yaml
github	www.github.com/vllm-project/vllm/commit/73b35cca7f3745d07d439c197768b25d88b6ab7f
github	www.github.com/python/cpython/commit/432117cd1f59c76d97da2eaff55a7d758301dbc7
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-25183
github	www.github.com/vllm-project/vllm

13 Dec 2025 07:54Current

3.6Low risk

Vulners AI Score3.6

CVSS 3.12.6

EPSS0.00323

SSVC

vulnerability hash collisions prefix caching predictable constant value