Database/AI/ML frameworks & serving
vLLM (Mooncake): Unsafe deserialization over ZMQ/TCP bound to all interfaces
CVE-2025-29783AI/ML frameworks & servingcurated
Impact
Unsafe deserialization over ZMQ/TCP bound to all interfaces
Who can reach it
Unauthenticated network, co-tenant reachable
What to do
Upgrade; the KV-transfer plane is unauthenticated by design in these versions
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.