Model Weight Theft

vLLM Multi-LoRA Serving Engine Flaw Enables Cross-Tenant Adapter Memory Extraction and Model Poisoning (CVE-2026-78430)

vLLM patches a high-severity vulnerability (CVE-2026-78430) in multi-LoRA serving allowing concurrent tenants to extract proprietary adapter weights from GPU memory.