vLLM multimodal cache consistency flaw can cause engine crash; official disclosure and fix provided
vLLM:多模态缓存一致性缺陷可使引擎中断
AI summary
vLLM's multimodal cache identity and eviction order have a consistency flaw. In default configurations, an unauthenticated remote client can crash a shared inference engine, requiring service restart. The fix involves consistency checks for multimodal UUIDs and processor cache. The GitHub advisory marks affected versions as < 0.31.0, with the fix in version 0.31.0.
Why it was selected
公告给出可复现的攻击链与受影响版本,部署多模态 vLLM 服务的团队可据此判断自身暴露面并决定是否升级。
Read original