Remote Code Execution Issue in vLLM Product by vLLM Project
CVE-2026-90553

8.5HIGH

Key Information:

Vendor

Vllm-project

Status
Vllm
Vendor
CVE Published:
12 September 2026

What is CVE-2026-90553?

vLLM versions prior to 0.28.0 are vulnerable to a remote code execution attack through the LlavaOnevision2 processor loader. The vulnerability arises because the loader disregards the trust_remote_code parameter when loading remote processor classes. This allows attackers to create malicious models containing arbitrary code within the processing_llava_onevision2.py file, executing with the authority of the vLLM process even if the trust_remote_code setting is disabled.

Affected Version(s)

vLLM 0 < 0.28.0

vLLM 0.28.0

References

https://github.com/vllm-project/vllm/security/advisories/...
vendor-advisory
https://www.vulncheck.com/advisories/vllm-before-0.28.0-r...
third-party-advisory

CVSS V4

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

NLx64
jperezdealgaba
.