From c130d494cda93b5979d45fa34358ded977475048 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Tue, 29 Apr 2025 14:54:56 +0000
Subject: [PATCH] Publish GHSA-hj4w-hm2g-p6w5

---
 .../GHSA-hj4w-hm2g-p6w5.json                  | 69 +++++++++++++++++++
 1 file changed, 69 insertions(+)
 create mode 100644 advisories/github-reviewed/2025/04/GHSA-hj4w-hm2g-p6w5/GHSA-hj4w-hm2g-p6w5.json

diff --git a/advisories/github-reviewed/2025/04/GHSA-hj4w-hm2g-p6w5/GHSA-hj4w-hm2g-p6w5.json b/advisories/github-reviewed/2025/04/GHSA-hj4w-hm2g-p6w5/GHSA-hj4w-hm2g-p6w5.json
new file mode 100644
index 00000000000..c3eddfa1a50
--- /dev/null
+++ b/advisories/github-reviewed/2025/04/GHSA-hj4w-hm2g-p6w5/GHSA-hj4w-hm2g-p6w5.json
@@ -0,0 +1,69 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-hj4w-hm2g-p6w5",
+  "modified": "2025-04-29T14:52:29Z",
+  "published": "2025-04-29T14:52:29Z",
+  "aliases": [
+    "CVE-2025-32444"
+  ],
+  "summary": "vLLM Vulnerable to Remote Code Execution via Mooncake Integration",
+  "details": "## Impacted Deployments\n\n**Note that vLLM instances that do NOT make use of the mooncake integration are NOT vulnerable.**\n\n## Description\n\nvLLM integration with mooncake is vaulnerable to remote code execution due to using `pickle` based serialization over unsecured ZeroMQ sockets. The vulnerable sockets were set to listen on all network interfaces, increasing the likelihood that an attacker is able to reach the vulnerable ZeroMQ sockets to carry out an attack.\n\n\nThis is a similar to [GHSA - x3m8 - f7g5 - qhm7](https://github.com/vllm-project/vllm/security/advisories/GHSA-x3m8-f7g5-qhm7), the problem is in\n\nhttps://github.com/vllm-project/vllm/blob/32b14baf8a1f7195ca09484de3008063569b43c5/vllm/distributed/kv_transfer/kv_pipe/mooncake_pipe.py#L179\n\nHere [recv_pyobj()](https://github.com/zeromq/pyzmq/blob/453f00c5645a3bea40d79f53aa8c47d85038dc2d/zmq/sugar/socket.py#L961) Contains implicit `pickle.loads()`, which leads to potential RCE.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "PyPI",
+        "name": "vllm"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0.6.5"
+            },
+            {
+              "fixed": "0.8.5"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "type": "WEB",
+      "url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-hj4w-hm2g-p6w5"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-x3m8-f7g5-qhm7"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/vllm-project/vllm/commit/a5450f11c95847cf51a17207af9a3ca5ab569b2c"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/vllm-project/vllm"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/vllm-project/vllm/blob/32b14baf8a1f7195ca09484de3008063569b43c5/vllm/distributed/kv_transfer/kv_pipe/mooncake_pipe.py#L179"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-502"
+    ],
+    "severity": "CRITICAL",
+    "github_reviewed": true,
+    "github_reviewed_at": "2025-04-29T14:52:29Z",
+    "nvd_published_at": null
+  }
+}
\ No newline at end of file