VulnWatch Daily: Critical RCE in LMDeploy, MCP Auth Bypasses, and vLLM DoS

Today's digest highlights a critical pickle deserialization RCE in LMDeploy, unauthenticated file reads in MCP servers leading to token theft, and multiple denial-of-service vectors in vLLM and Chroma affecting multi-tenant isolation.