CVE-2026-114054— vLLM before 0.31.0 Cross-Request Cache Aliasing via EXIF ImageID and Prefix-Cache Keys
Quick assessment
Affected
vllm-project vllm
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 0.31.0 版本之前的 vLLM 存在一个缓存别名（cache aliasing）漏洞。该漏洞允许已认证的攻击者通过提供由调用方控制的值（例如 EXIF ImageID 或 cache_salt），使共享缓存键发生碰撞。攻击者可以设置一个 UUID 格式的 EXIF ImageID 以获取其他请求的已处理媒体缓存，或者将 cache_salt 匹配为某个 LoRA 名称，从而复用第一层的 KV 状态。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-114054
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
vLLM before 0.31.0 Cross-Request Cache Aliasing via EXIF ImageID and Prefix-Cache Keys
Source: CVE Program / CVE List V5
Vulnerability Description
vLLM before 0.31.0 contains a cache aliasing vulnerability that allows authenticated attackers to collide shared cache keys by supplying caller-controlled values such as EXIF ImageID or cache_salt. Attackers can set a UUID EXIF ImageID to receive another request's cached processed media, or match cache_salt to a LoRA name to reuse first-block KV state.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
访问控制不恰当
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| vllm-project | vllm | 0 ~ 0.31.0 | - |
|
II. Public POCs for CVE-2026-114054
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-114054
请登录查看更多情报信息。
Other References for CVE-2026-114054 (2)
Same Patch Batch · vllm-project · 2026-10-21 · 7 CVEs total
| CVE-2026-114053 | 8.1 HIGH | vLLM 0.7.3 before 0.31.0 RCE via mm_processor_kwargs.code_revision |
| CVE-2026-114050 | 7.5 HIGH | vLLM before 0.31.0 Remote Engine Crash via Forged Multimodal UUID |
| CVE-2026-114055 | 7.5 HIGH | vLLM 0.7.3 before 0.31.0 DoS via Unvalidated mm_processor_kwargs |
| CVE-2026-114052 | 7.5 HIGH | vLLM 0.25.0 before 0.31.0 MOSS-Audio Memory Exhaustion via /tokenize mm_processor_kwargs |
| CVE-2026-114051 | 7.5 HIGH | vLLM before 0.31.0 Denial of Service via min_tokens in /inference/v1/generate |
| CVE-2026-114049 | 3.7 LOW | vLLM before 0.31.0 Stale allowed_token_ids Mask via InputBatch.condense |
IV. Related Vulnerabilities
Same product: vllm
-
CVE-2026-114055
vLLM 0.7.3 before 0.31.0 DoS via Unvalidated mm_processor_kw -
CVE-2026-114053
vLLM 0.7.3 before 0.31.0 RCE via mm_processor_kwargs.code_re -
CVE-2026-114052
vLLM 0.25.0 before 0.31.0 MOSS-Audio Memory Exhaustion via / -
CVE-2026-114051
vLLM before 0.31.0 Denial of Service via min_tokens in /infe -
CVE-2026-114050
vLLM before 0.31.0 Remote Engine Crash via Forged Multimodal
Same vendor: vllm-project
-
CVE-2026-114055
vLLM 0.7.3 before 0.31.0 DoS via Unvalidated mm_processor_kw -
CVE-2026-114053
vLLM 0.7.3 before 0.31.0 RCE via mm_processor_kwargs.code_re -
CVE-2026-114052
vLLM 0.25.0 before 0.31.0 MOSS-Audio Memory Exhaustion via / -
CVE-2026-114050
vLLM before 0.31.0 Remote Engine Crash via Forged Multimodal -
CVE-2026-114051
vLLM before 0.31.0 Denial of Service via min_tokens in /infe
V. Comments for CVE-2026-114054
No comments yet