PYSEC-2026-566

See a problem?

Import Source

https://github.com/pypa/advisory-database/blob/main/vulns/vllm/PYSEC-2026-566.yaml

JSON Data

https://api.osv.dev/v1/vulns/PYSEC-2026-566

Aliases

Published

2026-06-29T11:50:35Z

Modified

2026-07-01T20:23:11Z

Severity

9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

vLLM Deserialization of Untrusted Data vulnerability

Details

vllm-project vllm version v0.6.2 contains a vulnerability in the MessageQueue.dequeue() API function. The function uses pickle.loads to parse received sockets directly, leading to a remote code execution vulnerability. An attacker can exploit this by sending a malicious payload to the MessageQueue, causing the victim's machine to execute arbitrary code.

References

Affected packages

PyPI / vllm

Package

Name: vllm; View open source insights on deps.dev
Purl: pkg:pypi/vllm

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Last Affected

0.6.2

Affected versions

0.*

0.0.1

0.1.0

0.1.1

0.1.2

0.1.3

0.1.4

0.1.5

0.1.6

0.1.7

0.2.0

0.2.1

0.2.1.post1

0.2.2

0.2.3

0.2.4

0.2.5

0.2.6

0.2.7

0.3.0

0.3.1

0.3.2

0.3.3

0.4.0

0.4.0.post1

0.4.1

0.4.2

0.4.3

0.5.0

0.5.0.post1

0.5.1

0.5.2

0.5.3

0.5.3.post1

0.5.4

0.5.5

0.6.0

0.6.1

0.6.1.post1

0.6.1.post2

0.6.2

Database specific

source

"https://github.com/pypa/advisory-database/blob/main/vulns/vllm/PYSEC-2026-566.yaml"