CVE-2025-30202

Summary

CVE-2025-30202 is a vulnerability affecting versions 0.5.2 and older of vLLM, a high-throughput inference engine. In multi-node deployments, vLLM uses ZeroMQ for certain communication tasks and opens an XPUB socket on the primary host for tensor parallelism. This socket, which is always open, can be accessed by any client with network access to the primary host, allowing them to receive internal vLLM state information. While this data is not particularly useful to attackers, they can cause a denial of service by repeatedly connecting to the socket without reading the published data, potentially slowing down or blocking the publisher. The vulnerability has been addressed in version 0.8.5.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.