CVE-2025-29783 vLLM Allows Remote Code Execution via Mooncake Integration

What is CVE-2025-29783?

CVE-2025-29783 is a critical unsafe deserialization vulnerability in Vllm Vllm, published on 19 Mar 2025. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. When vLLM is configured to use Mooncake, unsafe deserialization exposed directly over ZMQ/TCP on all network interfaces will allow attackers to execute remote code on distributed hosts. This is a remote code execution vulnerability impacting any deployments using Mooncake to distribute KV across distributed hosts. This vulnerability is fixed in 0.8.0.

Weakness: CWE-502

Which versions are affected by CVE-2025-29783?

3 open source packages ship an affected version, including vllm. It affects 1 product.

Products include Vllm Vllm.

How do I fix CVE-2025-29783?

Upgrade vllm to 0.8.0 or later.

Upgrade, and only deserialise data from trusted sources or with an allow-list of types. More about Unsafe deserialization.

Is CVE-2025-29783 being exploited?

There is no known exploitation of CVE-2025-29783 in the wild and no public exploit code.

Other vulnerabilities in Vllm Vllm

• CVE-2025-32444 vLLM Vulnerable to Remote Code Execution via Mooncake Integration Critical 10.0
• CVE-2026-22778 vLLM leaks a heap address when PIL throws an error Critical 9.8
• CVE-2025-47277 vLLM Allows Remote Code Execution via PyNcclPipe Communication Service Critical 9.8
• CVE-2024-11041 Remote Code Execution in vllm-project/vllm Critical 9.8
• CVE-2026-48746 vLLM: OpenAI auth bypass Critical 9.1

All Vllm Vllm vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-x3m8-f7g5-qhm7, PYSEC-2025-63.