Jiapeng Li

LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Embed Cache RPyC Service

SGLang through 0.5.20 Denial of Service via Duplicate bootstrap_room

vLLM through 0.29.0 Memory Exhaustion via Unvalidated NIXL tp_size

LightLLM through 1.2.0 Unauthenticated Remote Code Execution via NCCL PD RPyC Control Channel

vLLM through 0.29.0 Adjacent-Request Sampler State Corruption via Unvalidated Prompt Token IDs

vLLM before 0.29.0 Cross-Request Logits Corruption via allowed_token_ids

LightLLM through 1.2.0 Missing Authentication in PD Master /pd_register WebSocket Endpoint

SGLang through 0.5.20 Unbounded Memory Allocation via STAGING_REQ chunk_idx

vLLM through 0.29.0 Memory Exhaustion via Rejected Requests

vLLM through 0.29.0 Resource Exhaustion via Ownerless Mooncake Transfer Placeholders