CVE-2024-11041: vLLM Deserialization of Untrusted Data vulnerability

March 20, 2025 (updated March 21, 2025)

vllm-project vllm version v0.6.2 contains a vulnerability in the MessageQueue.dequeue() API function. The function uses pickle.loads to parse received sockets directly, leading to a remote code execution vulnerability. An attacker can exploit this by sending a malicious payload to the MessageQueue, causing the victim’s machine to execute arbitrary code.

References

github.com/advisories/GHSA-5vqr-wprc-cpp7
github.com/vllm-project/vllm
github.com/vllm-project/vllm/blob/7193774b1ff8603ad5bf4598e5efba0d9a39b436/vllm/distributed/device_communicators/shm_broadcast.py
huntr.com/bounties/00136195-11e0-4ad0-98d5-72db066e867f
nvd.nist.gov/vuln/detail/CVE-2024-11041

Code Behaviors & Features

Detect and mitigate CVE-2024-11041 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →