CVE-2024-9053 — Vulnerability in vllm — CVE Details

CRITICAL

vLLM allows Remote Code Execution by Pickle Deserialization via AsyncEngineRPCServer() RPC server entrypoints

Published March 20, 2025Updated August 7, 2026Source: osv

Summary

vllm-project vllm version 0.6.0 contains a vulnerability in the AsyncEngineRPCServer() RPC server entrypoints. The core functionality run_server_loop() calls the function _make_handler_coro(), which directly uses cloudpickle.loads() on received messages without any sanitization. This can result in remote code execution by deserializing malicious pickle data.

Advisory Timeline

First published March 20, 2025 (571 days ago).
Last revised August 7, 2026 — 505 days after initial publication.

Affected Packages (1)

Affects 1 ecosystem: pypi (1).

Package	Ecosystem	Affected	Fixed In
vllm	pypi	0.0.1, 0.1.0, 0.1.1, 0.1.2 (+32 more)	Range-based data available

Vulnerability Classification

Common Weakness Enumeration (CWE) identifiers for this vulnerability type.

CWE-502
Deserialization of Untrusted DataMITRE
CWE-78
OS Command InjectionMITRE

CVSS Score Breakdown

What the CVSS (Common Vulnerability Scoring System) 9.8 score means for each attack dimension.

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

Frequently Asked Questions

What is CVE-2024-9053?: vLLM allows Remote Code Execution by Pickle Deserialization via AsyncEngineRPCServer() RPC server entrypoints This vulnerability has been assigned a severity rating of CRITICAL (CVSS score: 9.8/10).
How do I check if my project is affected by CVE-2024-9053?: CVE-2024-9053 affects vllm. Use GeekWala's free vulnerability scanner to check your dependencies against CVE-2024-9053 and 200,000+ other known vulnerabilities.

Severity & Exploitability

CVSS Score

9.8

Exploitation is straightforward and causes maximum impact. Patch immediately.

Also Known As

GHSA-cj47-qj6g-x7r4

PYSEC-2025-222

Related CVEs

CVE-2026-22778
CRITICAL
vLLM has RCE In Video Processing
CVE-2024-11041
CRITICAL
vLLM Deserialization of Untrusted Data vulnerability
CVE-2025-47277
CRITICAL
vLLM Allows Remote Code Execution via PyNcclPipe Communication Service
CVE-2026-22778
CRITICAL
vLLM has RCE In Video Processing
CVE-2024-11041
CRITICAL
vLLM Deserialization of Untrusted Data vulnerability
CVE-2025-32444
CRITICAL
vLLM Vulnerable to Remote Code Execution via Mooncake Integration
CVE-2025-47277
CRITICAL
vLLM Allows Remote Code Execution via PyNcclPipe Communication Service
CVE-2024-9052
CRITICAL
vLLM deserialization vulnerability in vllm.distributed.GroupCoordinator.recv_object

Check if you're affected

Scan your dependencies to see if this vulnerability affects your projects.

Scan Your Dependencies