PT-2026-90658 · Vllm+1 · Vllm
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
vLLM before 0.28.0 contains a remote code execution vulnerability in the LlavaOnevision2 processor loader that ignores the trust remote code parameter when loading remote processor classes. Attackers can craft a malicious model with arbitrary code in processing llava onevision2.py that executes with vLLM process authority even when trust remote code is set to False.
Exploit
Fix
Code Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Vllm