CVE-2026-115912 | vllm-project vLLM up to 0.31.x Multimodal Caching pickle.loads monotonic_id deserialization

A vulnerability marked as critical has been reported in vllm-project vLLM up to 0.31.x. This affects the function pickle.loads of the component Multimodal Caching. Performing a manipulation of the argument monotonic_id results in deserialization.

This vulnerability is cataloged as CVE-2026-115912. It is possible to initiate the attack remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More