CVE-2026-114053

🚨High - vLLM RCE via AutoProcessor code revision Injection (CVE-2026-114053)

vLLM forwards client-supplied mm processor kwargs.code revision into Transformers AutoProcessor.from pretrained when trust remote code is enabled, letting attackers pick a malicious model revision whose dynamic processor code is imported. If the attacker controls a revision in the served model repo, a multimodal request to the unauthenticated /tokenize endpoint yields arbitrary Python code execution in the API process.

👉Affected: vllm >= 0.7.3, < 0.31.0 | Upgrade to 0.31.0