{"id":"https://openalex.org/W7161080518","doi":"https://doi.org/10.48550/arxiv.2605.11202","title":"Continuous Discovery of Vulnerabilities in LLM Serving Systems with Fuzzing","display_name":"Continuous Discovery of Vulnerabilities in LLM Serving Systems with Fuzzing","publication_year":2026,"publication_date":"2026-05-11","ids":{"openalex":"https://openalex.org/W7161080518","doi":"https://doi.org/10.48550/arxiv.2605.11202"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.11202","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.11202","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.11202","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5136081207","display_name":"Yunze Zhao","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhao, Yunze","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136047676","display_name":"Yibo Zhao","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhao, Yibo","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136065689","display_name":"Yuchen Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Yuchen","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015818714","display_name":"Zaoxing Liu","orcid":"https://orcid.org/0000-0002-9119-1679"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Zaoxing","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5105206771","display_name":"Michelle L. Mazurek","orcid":"https://orcid.org/0000-0003-4151-6428"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Mazurek, Michelle L.","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.3750999867916107,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.3750999867916107,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.29910001158714294,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.12129999697208405,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.9657999873161316},{"id":"https://openalex.org/keywords/liveness","display_name":"Liveness","score":0.6776000261306763},{"id":"https://openalex.org/keywords/reuse","display_name":"Reuse","score":0.45010000467300415},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.4339999854564667},{"id":"https://openalex.org/keywords/reliability","display_name":"Reliability (semiconductor)","score":0.41929998993873596},{"id":"https://openalex.org/keywords/crash","display_name":"Crash","score":0.4075999855995178},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.39500001072883606},{"id":"https://openalex.org/keywords/state","display_name":"State (computer science)","score":0.36480000615119934},{"id":"https://openalex.org/keywords/concurrency","display_name":"Concurrency","score":0.3537999987602234},{"id":"https://openalex.org/keywords/oracle","display_name":"Oracle","score":0.351500004529953}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.9657999873161316},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7577000260353088},{"id":"https://openalex.org/C15569618","wikidata":"https://www.wikidata.org/wiki/Q3561421","display_name":"Liveness","level":2,"score":0.6776000261306763},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.47290000319480896},{"id":"https://openalex.org/C206588197","wikidata":"https://www.wikidata.org/wiki/Q846574","display_name":"Reuse","level":2,"score":0.45010000467300415},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.4339999854564667},{"id":"https://openalex.org/C43214815","wikidata":"https://www.wikidata.org/wiki/Q7310987","display_name":"Reliability (semiconductor)","level":3,"score":0.41929998993873596},{"id":"https://openalex.org/C183469790","wikidata":"https://www.wikidata.org/wiki/Q333501","display_name":"Crash","level":2,"score":0.4075999855995178},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.39500001072883606},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.36480000615119934},{"id":"https://openalex.org/C193702766","wikidata":"https://www.wikidata.org/wiki/Q1414548","display_name":"Concurrency","level":2,"score":0.3537999987602234},{"id":"https://openalex.org/C55166926","wikidata":"https://www.wikidata.org/wiki/Q2892946","display_name":"Oracle","level":2,"score":0.351500004529953},{"id":"https://openalex.org/C48145219","wikidata":"https://www.wikidata.org/wiki/Q1335365","display_name":"Security token","level":2,"score":0.3465999960899353},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.3449999988079071},{"id":"https://openalex.org/C11560541","wikidata":"https://www.wikidata.org/wiki/Q1756025","display_name":"Replay attack","level":3,"score":0.33410000801086426},{"id":"https://openalex.org/C2779891390","wikidata":"https://www.wikidata.org/wiki/Q964630","display_name":"Custodians","level":2,"score":0.32710000872612},{"id":"https://openalex.org/C28420585","wikidata":"https://www.wikidata.org/wiki/Q2665075","display_name":"Timing attack","level":4,"score":0.32499998807907104},{"id":"https://openalex.org/C2775941552","wikidata":"https://www.wikidata.org/wiki/Q25212305","display_name":"Isolation (microbiology)","level":2,"score":0.32170000672340393},{"id":"https://openalex.org/C141603448","wikidata":"https://www.wikidata.org/wiki/Q134830","display_name":"Prefix","level":2,"score":0.3061000108718872},{"id":"https://openalex.org/C9996903","wikidata":"https://www.wikidata.org/wiki/Q1749235","display_name":"Cryptographic nonce","level":3,"score":0.3043999969959259},{"id":"https://openalex.org/C110251889","wikidata":"https://www.wikidata.org/wiki/Q1569697","display_name":"Model checking","level":2,"score":0.2962000072002411},{"id":"https://openalex.org/C2781251061","wikidata":"https://www.wikidata.org/wiki/Q5416089","display_name":"Evasion (ethics)","level":3,"score":0.29580000042915344},{"id":"https://openalex.org/C206345919","wikidata":"https://www.wikidata.org/wiki/Q20380951","display_name":"Resource (disambiguation)","level":2,"score":0.2946999967098236},{"id":"https://openalex.org/C31691690","wikidata":"https://www.wikidata.org/wiki/Q1753979","display_name":"Timeout","level":2,"score":0.2935999929904938},{"id":"https://openalex.org/C2779182362","wikidata":"https://www.wikidata.org/wiki/Q17126187","display_name":"Session (web analytics)","level":2,"score":0.29350000619888306},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.28600001335144043},{"id":"https://openalex.org/C99138194","wikidata":"https://www.wikidata.org/wiki/Q183427","display_name":"Hash function","level":2,"score":0.27630001306533813},{"id":"https://openalex.org/C2776576444","wikidata":"https://www.wikidata.org/wiki/Q303569","display_name":"Attack surface","level":2,"score":0.27489998936653137},{"id":"https://openalex.org/C109751979","wikidata":"https://www.wikidata.org/wiki/Q998767","display_name":"Failover","level":2,"score":0.2732999920845032},{"id":"https://openalex.org/C136643341","wikidata":"https://www.wikidata.org/wiki/Q1361526","display_name":"Reachability","level":2,"score":0.27300000190734863},{"id":"https://openalex.org/C148176105","wikidata":"https://www.wikidata.org/wiki/Q206494","display_name":"Transport Layer Security","level":3,"score":0.26899999380111694},{"id":"https://openalex.org/C120524526","wikidata":"https://www.wikidata.org/wiki/Q1709148","display_name":"Reboot","level":2,"score":0.26579999923706055},{"id":"https://openalex.org/C2779585090","wikidata":"https://www.wikidata.org/wiki/Q3457762","display_name":"Resilience (materials science)","level":2,"score":0.2597000002861023},{"id":"https://openalex.org/C2779227376","wikidata":"https://www.wikidata.org/wiki/Q6505497","display_name":"Layer (electronics)","level":2,"score":0.2587999999523163},{"id":"https://openalex.org/C2780945871","wikidata":"https://www.wikidata.org/wiki/Q194274","display_name":"Backup","level":2,"score":0.25540000200271606},{"id":"https://openalex.org/C2778707766","wikidata":"https://www.wikidata.org/wiki/Q202064","display_name":"Phone","level":2,"score":0.2515000104904175},{"id":"https://openalex.org/C190793597","wikidata":"https://www.wikidata.org/wiki/Q189768","display_name":"Application layer","level":3,"score":0.25029999017715454}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.11202","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.11202","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.11202","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.11202","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.7528182864189148,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"LLM":[0,69,175],"inference":[1,28,70],"and":[2,39,52,59,89,93,110,131,142,154,171],"serving":[3,19,166],"systems":[4],"have":[5],"become":[6],"security-critical":[7],"infrastructure;":[8],"however,":[9],"many":[10],"of":[11,152],"their":[12],"most":[13],"concerning":[14],"failures":[15],"arise":[16],"from":[17,23],"the":[18],"layer":[20],"rather":[21],"than":[22],"model":[24],"behavior":[25,44,167],"alone.":[26],"Modern":[27],"engines":[29,71],"combine":[30],"KV":[31],"cache,":[32],"batching,":[33],"prefix":[34],"sharing,":[35],"speculative":[36],"decoding,":[37],"adapters,":[38],"multi-tenant":[40],"scheduling,":[41],"creating":[42],"shared-state":[43],"that":[45,72,139],"only":[46],"emerges":[47],"under":[48],"realistic":[49],"concurrent":[50,165],"workloads":[51],"is":[53],"missed":[54],"by":[55,118],"standard":[56],"model,":[57],"safety,":[58],"API":[60],"tests.":[61],"We":[62],"present":[63],"GRIEF,":[64],"a":[65,168],"greybox":[66],"fuzzer":[67],"for":[68,174],"treats":[73],"timed":[74],"multi-request":[75],"traces":[76],"as":[77],"first-class":[78,169],"inputs,":[79],"uses":[80],"lightweight":[81],"oracles":[82],"to":[83,100],"detect":[84],"crashes,":[85],"hangs,":[86],"performance":[87,129],"pathologies,":[88],"silent":[90,147],"output":[91],"corruption,":[92],"applies":[94],"controlled":[95],"replay":[96],"with":[97],"log-probability":[98],"checks":[99],"confirm":[101],"reproducible":[102],"serving-layer":[103],"failures.":[104],"Across":[105],"early":[106],"campaigns":[107],"on":[108],"vLLM":[109],"SGLang,":[111],"GRIEF":[112],"discovers":[113],"15":[114],"vulnerabilities,":[115],"10":[116],"confirmed":[117],"engine":[119],"developers,":[120],"including":[121],"2":[122],"CVEs,":[123],"spanning":[124],"KV-cache":[125],"isolation":[126],"failures,":[127],"cross-request":[128,148],"interference,":[130],"crash":[132],"or":[133,160],"liveness":[134],"bugs.":[135],"These":[136],"results":[137],"show":[138],"concurrency,":[140],"caching,":[141],"state":[143],"reuse":[144],"can":[145],"induce":[146],"contamination,":[149],"noisy-neighbor":[150],"denial":[151],"service,":[153],"delayed":[155],"crashes":[156],"without":[157],"malformed":[158],"inputs":[159],"explicit":[161],"server":[162],"errors,":[163],"making":[164],"security":[170],"reliability":[172],"boundary":[173],"infrastructure.":[176]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-14T00:00:00"}