https://vulnerability.circl.lu/sightings/feed 2026-10-06T17:04:25.276178+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/462c39da-ebf4-42d8-a188-876f0f3ffb83/export 2026-10-06T17:04:25.293835+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "462c39da-ebf4-42d8-a188-876f0f3ffb83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105752", "type": "seen", "source": "https://gist.github.com/alon710/fc11ccb569b6f106fb32d9147f53be46", "content": "# CVE-2026-105752: CVE-2026-105752: Cross-Tenant Prefix-Cache Information Leak via Cache Salt Omission in vLLM Harmony Path\n\n> **CVSS Score:** 3.1\n> **Published:** 2026-10-06\n> **Full Report:** https://cvereports.com/reports/CVE-2026-105752\n\n## Summary\nA vulnerability in vLLM prior to 0.30.0 allows an authenticated multi-tenant attacker to infer execution history and prompt structures of other tenants. The multi-turn Responses API ('Harmony' path) fails to propagate the 'cache_salt' parameter during tool-call continuation steps, storing sensitive prompt prefixes in the global, unsalted cache space.\n\n## TL;DR\nvLLM fails to propagate the cache partition salt during multi-turn tool execution continuations, exposing post-tool prompt prefixes in the shared global cache and creating a side-channel oracle for co-tenants.\n\n## Technical Details\n\n- **CWE ID**: CWE-524, CWE-200\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 3.1 (Low)\n- **EPSS Score**: 0.00043\n- **Impact**: Partial Tenant Cache Isolation Failure / Metadata Leakage\n- **Exploit Status**: none\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- vLLM engine deployments utilizing the multi-turn Responses API ('Harmony' path) with prefix caching enabled.\n- **vLLM**: < 0.30.0 (Fixed in: `0.30.0`)\n\n## Mitigation\n\n- Upgrade the vLLM deployment to version 0.30.0 or newer.\n- Disable global prefix caching via the startup configuration flag.\n- Limit exposure by restricting multi-tenant access to multi-turn agent endpoints.\n\n**Remediation Steps:**\n1. Identify all active vLLM container instances running versions prior to 0.30.0.\n2. In corporate environments where immediate upgrading is blocked, modify the container startup arguments to include --enable-prefix-caching=false to disable the caching side-channel.\n3. Update requirements.txt, pyproject.toml, or Dockerfiles to specify vllm>=0.30.0.\n4. Deploy the updated service images to the staging environment and verify that multi-turn API calls successfully output responses without errors.\n5. Perform rolling updates of the production instances to complete the remediation process.\n\n## References\n\n- [GitHub Security Advisory: GHSA-935w-9g4m-p28p](https://github.com/vllm-project/vllm/security/advisories/GHSA-935w-9g4m-p28p)\n- [NVD - CVE-2026-105752 Detail](https://nvd.nist.gov/vuln/detail/CVE-2026-105752)\n- [CVE.org Authority Record for CVE-2026-105752](https://www.cve.org/CVERecord?id=CVE-2026-105752)\n- [vLLM v0.30.0 Release Tag](https://github.com/vllm-project/vllm/releases/tag/v0.30.0)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-105752) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-10-06T03:30:34.000000Z"} 2026-10-06T03:30:34+00:00 https://vulnerability.circl.lu/sighting/73027e11-3572-4315-8f99-466230aad030/export 2026-10-06T17:04:25.295672+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "73027e11-3572-4315-8f99-466230aad030", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105753", "type": "seen", "source": "https://gist.github.com/alon710/c6bdbc8fe870bf2cbcc1807d8a196cec", "content": "# CVE-2026-105753: CVE-2026-105753: Reachable Assertion in vLLM Multimodal IPC Cache Leading to Denial of Service\n\n> **CVSS Score:** 6.5\n> **Published:** 2026-10-06\n> **Full Report:** https://cvereports.com/reports/CVE-2026-105753\n\n## Summary\nA state desynchronization (cache drift) vulnerability exists in the multimodal Inter-Process Communication (IPC) Least Recently Used (LRU) caches of vLLM. When a multimodal request fails validation after its media hash has been registered on the frontend but before the payload is committed to the backend engine core, the frontend and backend caches drift out of lockstep. A subsequent request reusing the same media triggers an assertion failure in the backend engine core, resulting in a complete denial of service.\n\n## TL;DR\nA state desynchronization between vLLM's frontend and backend caches allows remote authenticated users to trigger a fatal assertion crash (CWE-617) by submitting a validation-failing multimodal request followed by a duplicate request, leading to complete server denial of service.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-617 (Reachable Assertion)\n- **Attack Vector**: Network (AV:N)\n- **CVSS Score**: 6.5\n- **Impact**: Complete Denial of Service (DoS)\n- **Exploit Status**: Proof of Concept (PoC) / Unit Tests available\n- **KEV Status**: Not listed in CISA KEV\n\n## Affected Systems\n\n- vLLM Multimodal Serving Engine\n- **vllm**: < 0.28.0 (Fixed in: `0.28.0`)\n\n## Mitigation\n\n- Upgrade vLLM to version 0.28.0 or later to apply the official security patches.\n- Disable multimodal IPC caching if the serving workload does not require repetitive media processing.\n- Enforce prompt and token limit validation at an upstream proxy or API gateway before requests reach the vLLM instance.\n\n**Remediation Steps:**\n1. Identify all deployed containers or environments running vLLM versions prior to 0.28.0.\n2. Update the deployment dependencies or container base images to reference vLLM >= 0.28.0.\n3. Restart the vLLM inference service and verify that the warning logs for cache misses resolve gracefully on retryable inputs.\n\n## References\n\n- [GitHub Security Advisory GHSA-ph3r-5jfg-f84f](https://github.com/vllm-project/vllm/security/advisories/GHSA-ph3r-5jfg-f84f)\n- [NVD CVE-2026-105753 Detail](https://nvd.nist.gov/vuln/detail/CVE-2026-105753)\n- [vLLM Pull Request #46747](https://github.com/vllm-project/vllm/pull/46747)\n- [vLLM Pull Request #51897](https://github.com/vllm-project/vllm/pull/51897)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-105753) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-10-06T02:30:31.000000Z"} 2026-10-06T02:30:31+00:00 https://vulnerability.circl.lu/sighting/449f32c3-3688-4145-861f-745c9de6fc99/export 2026-10-06T17:04:25.295911+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "449f32c3-3688-4145-861f-745c9de6fc99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105750", "type": "seen", "source": "https://gist.github.com/alon710/10ed8dd9612b431708d29f2d754ab7f4", "content": "# CVE-2026-105750: CVE-2026-105750: Local File Disclosure in Docling via Permissive HTML Rendering Requests Filter\n\n> **CVSS Score:** 5.9\n> **Published:** 2026-10-06\n> **Full Report:** https://cvereports.com/reports/CVE-2026-105750\n\n## Summary\nCVE-2026-105750 is a medium-severity local file disclosure vulnerability affecting the Docling and Docling-Slim libraries. When processing HTML documents using the optional Playwright rendering backend, the application fail to validate and restrict request URIs using the file:// scheme. This permits an attacker supplying a crafted HTML file to access, render, and exfiltrate local system files.\n\n## TL;DR\nA validation flaw in Docling's HTML rendering backend allows local file disclosure (LFD) when processing untrusted HTML files using Playwright.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-863 / CWE-552\n- **Attack Vector**: Network\n- **CVSS Base Score**: 5.9 (Medium)\n- **Exploit Status**: Proof of Concept (PoC) available\n- **CISA KEV Status**: No\n- **Vulnerable Versions**: >= 2.82.0, < 2.118.1\n- **Primary Impact**: Confidentiality (Arbitrary Local File Disclosure)\n\n## Affected Systems\n\n- Docling document processing environments running with HTML rendering enabled\n- **docling**: >= 2.82.0, < 2.118.1 (Fixed in: `2.118.1`)\n- **docling-slim**: >= 2.92.0, < 2.118.1 (Fixed in: `2.118.1`)\n\n## Mitigation\n\n- Upgrade docling and docling-slim to version 2.118.1 or later\n- Ensure HTMLBackendOptions.enable_local_fetch is set to False\n- Avoid utilizing HTMLBackendOptions.render_page=True when processing untrusted inputs\n- Process inputs as streams rather than local Path objects to enforce opaque-origin sandboxing\n\n**Remediation Steps:**\n1. Identify all deployment environments running docling or docling-slim.\n2. Update requirements.txt, poetry.lock, or other dependency files to reference version >=2.118.1.\n3. Execute pip install --upgrade docling docling-slim in the affected environment.\n4. Validate the configuration to ensure enable_local_fetch is disabled for user-supplied document parsers.\n\n## References\n\n- [GitHub Security Advisory GHSA-q43m-vhcp-mhvm](https://github.com/docling-project/docling/security/advisories/GHSA-q43m-vhcp-mhvm)\n- [Fix Commit 1612b88](https://github.com/docling-project/docling/commit/1612b8875b0937447ce3122536fb5360a7102a0a)\n- [Docling v2.118.1 Release](https://github.com/docling-project/docling/releases/tag/v2.118.1)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-105750) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-10-06T01:30:31.000000Z"} 2026-10-06T01:30:31+00:00 https://vulnerability.circl.lu/sighting/89ecfc6c-4f91-47da-ac12-b42bfc39192d/export 2026-10-06T17:04:25.296110+00:00 Joseph Lee https://cvepremium.circl.lu/user/syspect {"uuid": "89ecfc6c-4f91-47da-ac12-b42bfc39192d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-105752", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-935w-9g4m-p28p", "content": "", "creation_timestamp": "2026-10-06T00:02:02.000000Z"} 2026-10-06T00:02:02+00:00 https://vulnerability.circl.lu/sighting/812d0d71-c027-4f56-9dac-fe07f9d11a5b/export 2026-10-06T17:04:25.297455+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "812d0d71-c027-4f56-9dac-fe07f9d11a5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105758", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7dbxevbr4s4pj", "content": "CVE-2026-105758 - vLLM: Qwen2-VL / Qwen3-VL video samplers bound on request-controlled max_frames, which the num_frames ceiling does not reach\nCVE ID : CVE-2026-105758\n \n Published : Oct. 5, 2026, 10:54 p.m. | 16\u00a0minutes ago\n \n Description : vLLM is an inference and serving en...", "creation_timestamp": "2026-10-05T23:56:00.509695Z"} 2026-10-05T23:56:00.509695+00:00 https://vulnerability.circl.lu/sighting/ddd41b92-c0cb-4f83-a4de-17f335adc327/export 2026-10-06T17:04:25.297642+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "ddd41b92-c0cb-4f83-a4de-17f335adc327", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105757", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jvdfj4rrw7dgc", "content": "CVE-2026-105757 - vLLM: Structured-output request errors escape the request boundary and terminate the shared EngineCore \u2014 engine-fatal denial of service (3 sites)\nCVE ID : CVE-2026-105757\n \n Published : Oct. 5, 2026, 10:52 p.m. | 19\u00a0minutes ago\n \n Description : vLLM is an inf...", "creation_timestamp": "2026-10-05T23:50:01.993884Z"} 2026-10-05T23:50:01.993884+00:00 https://vulnerability.circl.lu/sighting/08661bf4-0805-4125-a7e9-1200a575c783/export 2026-10-06T17:04:25.297802+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "08661bf4-0805-4125-a7e9-1200a575c783", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105756", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jstyyb7gjubot", "content": "CVE-2026-105756 - vLLM: Loose `cache_salt` validation lets a single request kill EngineCore on LMCache-MP deployments \u2014 uncaught downstream `ValueError` denial of service\nCVE ID : CVE-2026-105756\n \n Published : Oct. 5, 2026, 10:49 p.m. | 21\u00a0minutes ago\n \n Description : vLLM is...", "creation_timestamp": "2026-10-05T23:44:00.773908Z"} 2026-10-05T23:44:00.773908+00:00 https://vulnerability.circl.lu/sighting/26f7b568-1878-476e-86dd-b170764e12af/export 2026-10-06T17:04:25.297925+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "26f7b568-1878-476e-86dd-b170764e12af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105755", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/cbb546uax64mn", "content": "CVE-2026-105755 - vLLM: Flash late-interaction scoring caches query embeddings under a caller-controlled request id \u2014 cross-request integrity break and induced errors on `/score` and `/rerank`\nCVE ID : CVE-2026-105755\n \n Published : Oct. 5, 2026, 10:47 p.m. | 23\u00a0minutes ago\n \n...", "creation_timestamp": "2026-10-05T23:38:00.896970Z"} 2026-10-05T23:38:00.896970+00:00 https://vulnerability.circl.lu/sighting/50051067-0707-4767-89a1-7d49b28d6032/export 2026-10-06T17:04:25.298020+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "50051067-0707-4767-89a1-7d49b28d6032", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10575", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mwb4guozc423", "content": "\ud83d\udccc CVE-2026-10575 - IBM MQ could allow an authenticated attacker to cause a denial of service or potentially escalate privileges due to a heap buffer overflow when proces... https://www.cyberhub.blog/cves/CVE-2026-10575", "creation_timestamp": "2026-09-24T11:07:07.066673Z"} 2026-09-24T11:07:07.066673+00:00 https://vulnerability.circl.lu/sighting/5c18ce8c-99c3-4d6a-9844-39745b6725c0/export 2026-10-06T17:04:25.298117+00:00 Joseph Lee https://cvepremium.circl.lu/user/syspect {"uuid": "5c18ce8c-99c3-4d6a-9844-39745b6725c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-105751", "type": "published-proof-of-concept", "source": "https://github.com/docling-project/docling/security/advisories/GHSA-4xhp-xg4w-8ppm", "content": "", "creation_timestamp": "2026-08-24T13:31:59.000000Z"} 2026-08-24T13:31:59+00:00