Threats tagged 'pysec-2026-4345'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 0.5%	CVE-2026-115912Vllm · Prior to 0.32.0, an authenticated caller can place forged shared-memory address and High7.5EPSS 0.5%2026-10-26GCVE DatabaseCVE-2026-115912 vLLM versions prior to 0.32.0 contain a vulnerability where an authenticated user can supply forged shared-memory address and monotonic_id values in public multimodal features.kwargs_data. In scale-out deployments with shared-memory multimodal caching enabled, this allows attacker-controlled data to be passed to pickle.loads(), enabling arbitrary Python code execution. This issue is resolved in version 0.32.0. EPSS 0.5%Report on CVE-2026-115912 Vulnerability #pysec-2026-4345 #pypi	GCVE Database	2026-10-26

Page 1 of 1