7 min read
Research A timing side channel in global KV-cache sharing lets unprivileged tenants reconstruct other users' prompts, PII, and system instructions from vLLM, SGLang, and similar inference frameworks. Multiple CVEs have been assigned; patches are in progress.