Cache sharing introduces a timing side-channel privacy risk, where an attacker can infer whether a sensitive prefix has been used by others through a lower TTFT; vLLM supports mitigation via cache salt.