{"uuid": "b087f85e-d304-42d9-8f63-5d49a283cf62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-9141", "type": "seen", "source": "https://bsky.app/profile/breachprotocol.bsky.social/post/3mturfgey352x", "content": "A widely read essay argues that LLM serving stacks parse model output into real code paths, and it anchors the argument in CVE-2025-9141, a confirmed remote-code-execution bug in vLLM's Qwen3-Coder tool parser that ran Python's eval() on model-generated arguments.", "creation_timestamp": "2026-08-25T02:27:07.169164Z"}