vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCE

影響: pip:vllm < 0.32.0 → 0.32.0

In vLLM 0.30.0, ImageMediaIO passes attacker-controlled image bytes to Pillow's format autodetection without restricting the accepted formats; the request's MIME label does not constrain decoder selection. An EPS payload labeled image/png reached the host's Ghostscript executable. On a host with Ghostscript affected by CVE-2024-29510, this exposes the known Ghostscript sandbox escape through vLLM's image-loading path and can execute commands with the vLLM process's privileges. A bounded marker-…

GitHub Advisory Database에서 읽기

2026. 10. 29. 오전 06:15, GitHub Advisory Database에서 "vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCE"을(를) 게시했습니다 (유형: 취약점 권고). 심각도는 "높음"(high)입니다. 관련 기술: Python. CVE: CVE-2026-115915.