Skip to content

Translation in progress Some entries still include text in the original language.

GitHub 安全公告·Indexed by this site · Originally publishedSelectedAttention64

vLLM multimodal cache consistency flaw can cause engine crash; official disclosure and fix provided

vLLM:多模态缓存一致性缺陷可使引擎中断

AI summary

vLLM's multimodal cache identity and eviction order have a consistency flaw. In default configurations, an unauthenticated remote client can crash a shared inference engine, requiring service restart. The fix involves consistency checks for multimodal UUIDs and processor cache. The GitHub advisory marks affected versions as < 0.31.0, with the fix in version 0.31.0.

Why it was selected

公告给出可复现的攻击链与受影响版本,部署多模态 vLLM 服务的团队可据此判断自身暴露面并决定是否升级。

Read originalgithub.com