CVE-2025-30165: Remote Code Execution in vLLM Multi-Node Cluster Configuration

# CVE-2025-30165: Remote Code Execution in vLLM Multi-Node Cluster Configuration

https://gcdradar.vercel.app/incidents/cve-2025-30165-remote-code-execution-in-vllm-multi-node-clus · AIR-2025-0280 · closed 2025-05-06

- Lane: Patch now
- Severity: 2 (Disclosed vulnerability)
- Fix status: Fix status unknown
- First reported: 2025-05-06
- AI role: Attack on AI
- Products: vLLM
- CVE ids: CVE-2025-30165
- CVSS: 8

## Summary

A remote code execution vulnerability exists in the V0 engine of vLLM when using tensor parallelism across multiple hosts. Due to the architecture, maintainers recommended running deployments on secure networks rather than issuing a patch.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2025-05-06: CVE-2025-30165: vLLM is an inference and serving engine for large language models. (https://nvd.nist.gov/vuln/detail/CVE-2025-30165)
- 2025-05-06: CVE-2025-30165: Remote Code Execution Vulnerability in vLLM Multi-Node Cluster Configuration (https://github.com/advisories/GHSA-9pcc-gvx5-r5wm)

## Sources

- 2025-05-06 GitHub Advisory Database: CVE-2025-30165: Remote Code Execution Vulnerability in vLLM Multi-Node Cluster Configuration https://github.com/advisories/GHSA-9pcc-gvx5-r5wm
- 2025-05-06 NVD: CVE-2025-30165: vLLM is an inference and serving engine for large language models. https://nvd.nist.gov/vuln/detail/CVE-2025-30165

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.