CVE-2024-9052 — vLLM deserialization vulnerability in vllm — CVE...

CRITICAL

vLLM deserialization vulnerability in vllm.distributed.GroupCoordinator.recv_object

Published March 20, 2025Updated August 7, 2026Source: osv

Summary

vllm-project vllm version 0.6.0 contains a vulnerability in the distributed training API. The function vllm.distributed.GroupCoordinator.recv_object() deserializes received object bytes using pickle.loads() without sanitization, leading to a remote code execution vulnerability. ### Maintainer perspective Note that vLLM does NOT use the code as described in the report on huntr. The problem only exists if you use these internal APIs in a way that exposes them to a network as described. The vllm team was not involved in the analysis of this report and the decision to assign it a CVE.

Advisory Timeline

First published March 20, 2025 (571 days ago).
Last revised August 7, 2026 — 505 days after initial publication.

Affected Packages (1)

Affects 1 ecosystem: pypi (1).

Package	Ecosystem	Affected	Fixed In
vllm	pypi	0.0.1, 0.1.0, 0.1.1, 0.1.2 (+49 more)	Range-based data available

Vulnerability Classification

Common Weakness Enumeration (CWE) identifiers for this vulnerability type.

CWE-502
Deserialization of Untrusted DataMITRE

CVSS Score Breakdown

What the CVSS (Common Vulnerability Scoring System) 9.8 score means for each attack dimension.

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

Frequently Asked Questions

What is CVE-2024-9052?: vLLM deserialization vulnerability in vllm.distributed.GroupCoordinator.recv_object This vulnerability has been assigned a severity rating of CRITICAL (CVSS score: 9.8/10).
How do I check if my project is affected by CVE-2024-9052?: CVE-2024-9052 affects vllm. Use GeekWala's free vulnerability scanner to check your dependencies against CVE-2024-9052 and 200,000+ other known vulnerabilities.

Severity & Exploitability

CVSS Score

9.8

Exploitation is straightforward and causes maximum impact. Patch immediately.

Also Known As

GHSA-pgr7-mhp5-fgjp

PYSEC-2026-568

Related CVEs

CVE-2026-22778
CRITICAL
vLLM has RCE In Video Processing
CVE-2024-11041
CRITICAL
vLLM Deserialization of Untrusted Data vulnerability
CVE-2025-47277
CRITICAL
vLLM Allows Remote Code Execution via PyNcclPipe Communication Service
CVE-2026-22778
CRITICAL
vLLM has RCE In Video Processing
CVE-2024-11041
CRITICAL
vLLM Deserialization of Untrusted Data vulnerability
CVE-2024-9053
CRITICAL
vLLM allows Remote Code Execution by Pickle Deserialization via AsyncEngineRPCServer() RPC server entrypoints
CVE-2025-32444
CRITICAL
vLLM Vulnerable to Remote Code Execution via Mooncake Integration
CVE-2025-47277
CRITICAL
vLLM Allows Remote Code Execution via PyNcclPipe Communication Service

Check if you're affected

Scan your dependencies to see if this vulnerability affects your projects.

Scan Your Dependencies