Tools AI Risk Radar ai-incident-0245
Incident record
vLLM image loading could reach a vulnerable Ghostscript
- Severity
- High
- Status
- Patched
- Type
- Infra Vuln
- Target
- vllm-project/vllm
- Actor
- researcher
What happened
Crafted image bytes could select the EPS decoder and reach an installed Ghostscript, despite a request labelling the image as PNG.
Command execution requires a host Ghostscript vulnerable to CVE-2024-29510 and access to an image-capable request path. The researcher reproduced execution through the real image loader; the HTTP chain was traced in source. The maintainer lists vLLM 0.30.0 as affected and 0.32.0 as patched.
Sources
- Maintainer security advisorygithub.com/vllm-project/vllm/security/advisories/GHSA-h3rc-j…
One record from the AI Risk Radar, maintained by the Security Desk.Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 20 October 2026