Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 23 Oct 2026 04:31:39 +0000 CVE-2026-114054 — vLLM before 0.31.0 Cross-Request Cache Aliasing via EXIF ImageID and Prefix-Cache Keys https://db.gcve.eu/vuln/cve-2026-114054 <p><strong>Affected:</strong> vllm-project vllm</p> <p>vLLM before 0.31.0 contains a cache aliasing vulnerability that allows authenticated attackers to collide shared cache keys by supplying caller-controlled values such as EXIF ImageID or cache_salt. Attackers can set a UUID EXIF ImageID to receive another request&#39;s cached processed media, or match cache_salt to a LoRA name to reuse first-block KV state.</p> <p><strong>Affected:</strong> vllm-project vllm</p> <p>vLLM before 0.31.0 contains a cache aliasing vulnerability that allows authenticated attackers to collide shared cache keys by supplying caller-controlled values such as EXIF ImageID or cache_salt. Attackers can set a UUID EXIF ImageID to receive another request&#39;s cached processed media, or match cache_salt to a LoRA name to reuse first-block KV state.</p> https://db.gcve.eu/vuln/cve-2026-114054