CVE-2026-115912

Name of the Vulnerable Software and Affected Versions vLLM versions prior to 0.32.0

Description An authenticated caller can provide forged shared-memory address and monotonic id values within the public multimodal features.kwargs data. In scale-out deployments where shared-memory multimodal caching is enabled, workers trust these values and pass attacker-selected bytes to the pickle.loads() function. This allows for arbitrary Python code execution, even if insecure serialization is disabled.

Recommendations Update to version 0.32.0.