vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCE

影響: pip:vllm < 0.32.0 → 0.32.0

In vLLM 0.30.0, ImageMediaIO passes attacker-controlled image bytes to Pillow's format autodetection without restricting the accepted formats; the request's MIME label does not constrain decoder selection. An EPS payload labeled image/png reached the host's Ghostscript executable. On a host with Ghostscript affected by CVE-2024-29510, this exposes the known Ghostscript sandbox escape through vLLM's image-loading path and can execute commands with the vLLM process's privileges. A bounded marker-…

Read on GitHub Advisory Database

On 10/29/2026, 06:15 AM, GitHub Advisory Database published "vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCE" (type: Advisory). Severity is "High" (high). Related technologies: Python. CVE: CVE-2026-115915.