Tag
vllm
Safeguard articles tagged "vllm" — guides, analysis, and best practices for software supply chain and application security.
3 articles
AI Security
vLLM CVE-2025-62164: Tensor Deserialization RCE
vLLM 0.10.2-0.11.0 deserialized user-supplied PyTorch tensors via torch.load() in the Completions API. Memory corruption, potential RCE.
Nov 26, 20255 min read
AI Security
vLLM CVE-2025-66448: Auto-Map RCE via Model Configs
A critical RCE in vLLM allows malicious model configs to bypass trust_remote_code=False. We analyze the bug, the patch, and what every vLLM operator should do.
Nov 22, 20257 min read
AI Security
ShadowMQ: 30+ RCE Flaws Across AI Inference Engines
Oligo Security disclosed ShadowMQ in November 2025: ZeroMQ-and-pickle deserialization patterns copy-pasted across vLLM, Meta Llama, TensorRT-LLM, and others. We dissect the pattern.
Nov 19, 20257 min read
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.