vLLM P2pNcclConnector remote KV cache exfil by request ID

Evidence record

Read the original source ↗

Claim-level citations (2)

• supportsvLLM accepted a client request ID as a trusted KV transfer destination: The vLLM advisory describes X-Request-Id parsing of a decode address into a ZMQ/NCCL destination, enabling leakage of KV tensors when the affected P2pNcclConnector is active.

  PoC execution path; affected connector; impact; version 0.24.0

• supportsvLLM accepted a client request ID as a trusted KV transfer destination: The vLLM GHSA traces a user-controlled X-Request-Id to the ZMQ/NCCL transfer peer in configured P2pNcclConnector producers; affected versions are 0.9.2 to below 0.24.0 and release 0.24.0 removes the connector.

  GHSA-vfp2-c8pq-v6h6; request-ID parser, ZMQ/NCCL send path and affected configuration