Evidence · DiggingBeagle record
vLLM maintainer advisory GHSA-6757-hggm-hp2w shared-memory handle forgery
vLLM maintainer advisory GHSA-6757-hggm-hp2w shared-memory handle forgery
- Source role
- primary disclosure
Evidence record
vLLM maintainer advisory GHSA-6757-hggm-hp2w shared-memory handle forgery
Claim-level citations (2)
- supportsvLLM trusted forged shared-memory handles across its multimodal scale-out boundary: The vLLM advisory states that the forged shared-memory handle path requires --mm-processor-cache-type shm plus the public scale-out multimodal features.kwargs_data envelope; the patched version 0.32.0 binds cache handle material cryptographically.
GHSA-6757-hggm-hp2w, Summary, Affected, and Fix sections
- supportsvLLM trusted forged shared-memory handles across its multimodal scale-out boundary: With the multimodal shared-memory cache enabled, an authenticated scale-out API caller can submit a forged address and monotonic_id carrier pointing to attacker-controlled bytes, which a worker passes to pickle.loads. The advisory documents a reproduction on vLLM 0.25.1 and patch 0.32.0.
Affected versions, Summary, Affected code and fixed handle-authentication design