{"id":"GHSA-hfwf-hgvp-4rr8","kind":"vulnerability","aliases":["GHSA-hfwf-hgvp-4rr8"],"related":[],"title":"Duplicate Advisory: vLLM vulnerable to remote denial of service through forged multimodal UUID cache desynchronization","description":"## Duplicate Advisory\n\nThis advisory has been withdrawn because it is a duplicate of GHSA-p92p-rxj5-7p2x. This link is maintained to preserve external references.\n\n## Original Description\nvLLM before 0.31.0 uses a client-supplied multimodal uuid verbatim as cache identity with no consistency check on cache hits, allowing engine crashes. Unauthenticated attackers can desynchronize the P0/P1 processor caches to trigger a fatal token-placeholder mismatch, killing the entire serving instance until restarted.","summary":"This advisory is withdrawn as a duplicate of GHSA-p92p-rxj5-7p2x; the original text says vLLM before 0.31.0 trusts a client-supplied multimodal uuid as cache identity. An unauthenticated attacker can desynchronize the processor caches and crash the whole serving instance until restart.","severity":"high","cvss":7.5,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"vllm","fixed":[],"affected":"< 0.31.0","ecosystem":"pypi"}],"ecosystems":["pypi"],"tags":["ai-tooling","cwe-345","llm-serving","python","self-hosted","vllm"],"not_affected_if":["managed-hosting","vllm-0.31.0-or-later"],"how_to_check":"pip show vllm (affected if the version is below 0.31.0)\nCheck the installed version against the advisory GHSA-p92p-rxj5-7p2x, which carries the live record","fix":"Upgrade vllm to 0.31.0 or later, as the original advisory states; confirm the fixed version in GHSA-p92p-rxj5-7p2x","status":"withdrawn","published_at":"2026-10-21T03:32:14+00:00","first_seen_at":"2026-10-23T20:45:22+00:00","triaged_at":"2026-10-23T20:55:45+00:00","updated_at":"2026-10-23T20:55:45+00:00","category":"ai-tooling","confidence":0.6,"triage":{"at":"2026-10-23T20:55:45Z","model":"claude-haiku-5-5","output":{"fix":"Upgrade vllm to 0.31.0 or later, as the original advisory states; confirm the fixed version in GHSA-p92p-rxj5-7p2x\nunknown","reach":"internet","impact":"medium","summary":"This advisory is withdrawn as a duplicate of GHSA-p92p-rxj5-7p2x; the original text says vLLM before 0.31.0 trusts a client-supplied multimodal uuid as cache identity. An unauthenticated attacker can desynchronize the processor caches and crash the whole serving instance until restart.","category":"ai-tooling","who_cares":["vllm","python","self-hosted","llm-serving"],"confidence":0.6,"needs_auth":"no","worst_case":"Unauthenticated remote requests crash the entire vLLM serving instance until restarted.","analyst_note":"Withdrawn duplicate; verify the live details and fixed version at GHSA-p92p-rxj5-7p2x, and whether the multimodal uuid path is reachable in default config.","how_to_check":"pip show vllm (affected if the version is below 0.31.0)\nCheck the installed version against the advisory GHSA-p92p-rxj5-7p2x, which carries the live record\nunknown","needs_analyst":true,"not_affected_if":["vllm-0.31.0-or-later","managed-hosting"],"user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000547,"input_tokens":2959,"output_tokens":503,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-345':31B '0.31.0':59B,116C '4rr8':20A,25A '7p2x':52B,103C 'advisori':2A,41B,87C,89C 'ai':28B 'ai-tool':27B 'allow':135C 'attack':72B,139C 'cach':14A,68B,77B,126C,133C,145C 'check':131C 'client':63B,120C 'client-suppli':62B,119C 'consist':130C 'crash':79B,137C 'cwe':30B 'denial':7A 'descript':113C 'desynchron':15A,74B,141C 'duplic':1A,46B,86C,97C 'engin':136C 'entir':156C 'extern':110C 'fatal':149C 'forg':11A 'ghsa':17A,22A,49B,100C 'ghsa-hfwf-hgvp-4rr8':16A,21A 'ghsa-p92p-rxj5-7p2x':48B,99C 'hfwf':18A,23A 'hgvp':19A,24A 'hit':134C 'host':38B 'ident':69B,127C 'instanc':83B,158C 'kill':154C 'link':105C 'llm':33B 'llm-serv':32B 'maintain':107C 'mismatch':153C 'multimod':12A,65B,122C 'origin':54B,112C 'p0/p1':143C 'p92p':50B,101C 'placehold':152C 'preserv':109C 'processor':76B,144C 'python':35B 'refer':111C 'remot':6A 'restart':85B,160C 'rxj5':51B,102C 'say':56B 'self':37B 'self-host':36B 'serv':34B,82B,157C 'servic':9A 'suppli':64B,121C 'text':55B 'token':151C 'token-placehold':150C 'tool':29B 'trigger':147C 'trust':60B 'unauthent':71B,138C 'use':117C 'uuid':13A,66B,123C 'verbatim':124C 'vllm':3A,26A,39B,57B,114C 'vulner':4A 'whole':81B 'withdrawn':43B,92C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-21T03:32:14+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss_by":"GitHub","poc_count":0,"sources":[{"source":"ghsa","external_id":"GHSA-hfwf-hgvp-4rr8","url":"https://github.com/advisories/GHSA-hfwf-hgvp-4rr8","severity":"high","published_at":"2026-10-21T03:32:14+00:00","modified_at":"2026-10-23T20:43:20+00:00","first_seen_at":"2026-10-23T20:45:22+00:00","fetched_at":"2026-10-23T20:45:22+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}