vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCE

影響: pip:vllm < 0.32.0 → 0.32.0

In vLLM 0.30.0, ImageMediaIO passes attacker-controlled image bytes to Pillow's format autodetection without restricting the accepted formats; the request's MIME label does not constrain decoder selection. An EPS payload labeled image/png reached the host's Ghostscript executable. On a host with Ghostscript affected by CVE-2024-29510, this exposes the known Ghostscript sandbox escape through vLLM's image-loading path and can execute commands with the vLLM process's privileges. A bounded marker-…

在 GitHub Advisory Database 阅读

2026/10/29 06:15，GitHub Advisory Database 发布了“vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCE”（类型：漏洞公告）。严重程度为“高危”（high）。相关技术：Python。CVE：CVE-2026-115915。