Remote Code Execution (RCE)

🗓️ 25 Mar 2025 11:52:33Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 5 Views

vllm has a Remote Code Execution vulnerability from unsafe deserialization in AsyncEngineRPCServer.

Reporter	Title	Published	Views	Family All 18
Chainguard	CVE-2024-9053 vulnerabilities	3 Jun 202501:15	–	cgr
Circl	CVE-2024-9053	20 Mar 202511:40	–	circl
CNNVD	vLLM 操作系统命令注入漏洞	20 Mar 202500:00	–	cnnvd
CVE	CVE-2024-9053	20 Mar 202510:09	–	cve
Cvelist	CVE-2024-9053 Remote Code Execution in vllm-project/vllm	20 Mar 202510:09	–	cvelist
EUVD	EUVD-2025-6874	3 Oct 202520:07	–	euvd
Github Security Blog	vLLM allows Remote Code Execution by Pickle Deserialization via AsyncEngineRPCServer() RPC server entrypoints	20 Mar 202512:32	–	github
NVD	CVE-2024-9053	20 Mar 202510:15	–	nvd
OSV	CGA-3V4F-CWXH-76GP	29 Jan 202600:42	–	osv
OSV	CVE-2024-9053	20 Mar 202510:15	–	osv

Vulners

Node

vllm vllmRange0.0.1–0.8.1python

vllm vllmMatch0.0.1python

vllm vllmMatch0.1.0python

vllm vllmMatch0.1.1python

vllm vllmMatch0.1.2python

vllm vllmMatch0.1.3python

vllm vllmMatch0.1.4python

vllm vllmMatch0.1.5python

vllm vllmMatch0.1.6python

vllm vllmMatch0.1.7python

vllm vllmMatch0.2.0python

vllm vllmMatch0.2.1python

vllm vllmMatch0.2.1.post1python

vllm vllmMatch0.2.2python

vllm vllmMatch0.2.3python

vllm vllmMatch0.2.4python

vllm vllmMatch0.2.5python

vllm vllmMatch0.2.6python

vllm vllmMatch0.2.7python

vllm vllmMatch0.3.0python

vllm vllmMatch0.3.1python

vllm vllmMatch0.3.2python

vllm vllmMatch0.3.3python

vllm vllmMatch0.4.0python

vllm vllmMatch0.4.0.post1python

vllm vllmMatch0.4.1python

vllm vllmMatch0.4.2python

vllm vllmMatch0.4.3python

vllm vllmMatch0.5.0python

vllm vllmMatch0.5.0.post1python

vllm vllmMatch0.5.1python

vllm vllmMatch0.5.2python

vllm vllmMatch0.5.3python

vllm vllmMatch0.5.3.post1python

vllm vllmMatch0.5.4python

vllm vllmMatch0.5.5python

vllm vllmMatch0.6.0python

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-9053
huntr	www.huntr.com/bounties/75a544f3-34a3-4da0-b5a3-1495cb031e09
github	www.github.com/vllm-project/vllm

13 Dec 2025 07:43Current

8.2High risk

Vulners AI Score8.2

CVSS 3.19.8

CVSS 39.8

EPSS0.10021

SSVC