## vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCE

- 種別: advisory
- 重大度: high
- 関連技術: python
- CVE: CVE-2026-115915
- 公開日時: 2026-10-28T21:15:29.000Z
- 情報源: GitHub Advisory Database (https://github.com/advisories/GHSA-h3rc-j82p-2c3h)
- パーマリンク: https://vulnpulse.app/items/ghsa-ghsa-h3rc-j82p-2c3h

影響: pip:vllm < 0.32.0 → 0.32.0
In vLLM 0.30.0, ImageMediaIO passes attacker-controlled image bytes to Pillow's format autodetection without restricting the accepted formats; the request's MIME label does not constrain decoder selection. An EPS payload labeled image/png reached the host's Ghostscript executable. On a host with Ghostscript affected by CVE-2024-29510, this exposes the known Ghostscript sandbox escape through vLLM's image-loading path and can execute commands with the vLLM process's privileges. A bounded marker-…