vLLM Mooncake integration pickle deserialization RCE over ZeroMQ
Date: 2025-04
Affected: vllm 0.6.5 - 0.8.4 (mooncake)
Attack vector: deserialization
Category: real-world
Severity: Critical
CVE: CVE-2025-29783
CVE-2025-32444
CWE: CWE-502
CVSS: 9.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)

vLLM 0.6.5 through <0.8.5 with mooncake integration is vulnerable to RCE due to pickle-based serialization over unsecured ZeroMQ sockets. Patched in 0.8.5.


Mitigations:

Architectural layers (MAESTRO):