The vulnerability arises from the construction of cache keys using user‑controlled values such as EXIF ImageID or cache_salt. An attacker who has authenticated access can set a UUID as an EXIF ImageID to retrieve another request’s cached processed media or set cache_salt to a LoRA name, causing the reuse of the first‑block KV state. This leaks confidential content and can alter model behavior, violating confidentiality and integrity. The weakness is an access control flaw (CWE-284) and an information disclosure flaw (CWE-639).

The affected product is vllm by the vllm‑project, versions earlier than 0.31.0. The vulnerability applies to all deployments running vLLM before the 0.31.0 release, regardless of environment customization. No specific patch versions are listed within the advisory beyond the threshold of 0.31.0.

The CVSS score of 7.1 indicates a medium‑to‑high severity vulnerability. The EPSS score is less than 1 %, showing low exploitation probability based on current data, and the vulnerability is not listed in CISA’s KEV catalog. Attacks require authenticated access and rely on the ability to specify the EXIF ImageID or cache_salt values, so attackers would need legitimate login credentials or compromised accounts. Despite the low EPSS, the impact on data confidentiality and potential service disruption warrants prompt remediation.