vllm-Project vllm Remote Code Execution Vulnerability via Deserialization in AsyncEngineRPCServer

A remote code execution vulnerability exists in vllm-project vllm version 0.6.0 within the AsyncEngineRPCServer RPC server entrypoints. The issue arises because the core functionality, run_server_loop(), calls the _make_handler_coro() function, which directly applies cloudpickle.loads() to received messages without any form of sanitization. This lack of validation allows for the deserialization of malicious pickle data, leading to remote code execution.

Impact

Exploitation of this vulnerability allows for remote code execution on the server where vllm-project vllm 0.6.0 is running.