cve-2026-115912

Oct 29, 2026 4 min read

vLLM 0.32.0 Fixes Pickle RCE Path and Ghostscript Risk in 8 Advisories

Eight vLLM advisories published on October 28 are all fixed in 0.32.0. Two are rated high: a forged shared-memory handle that reaches pickle.loads in the worker, and an image loader that can hand EPS files to Ghostscript.