vLLM Vulnerability Enables Remote Code Execution Via Malicious Payloads

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

vLLM Vulnerability Allows Remote Code Execution via Malicious Payloads A vulnerability in vLLM versions 0.10.2 and later has been identified, allowing for remote code execution through malicious payloads. This flaw arises from improper handling of user-supplied prompt embeddings, potentially affecting users of the software. 3 sources 39