vLLM: Request-controlled mm_processor_kwargs.code_revision allows remote code execution
影響: pip:vllm >= 0.7.3, < 0.31.0 → 0.31.0
An untrusted multimodal request can set mm_processor_kwargs.code_revision. When vLLM serves a model whose Hugging Face processor uses dynamic auto_map code and the operator enabled --trust-remote-code, this request value reaches AutoProcessor.from_pretrained and selects the Python revision imported by Transformers. This lets a client replace the operator-reviewed processor module with code from another revision of the same model repository. The operator-selected model/data revision remains pinn…
| CVE | CVE-2026-114053 |
|---|---|
| 정보원 | GitHub Advisory Database |
| 수집 시각 | 2026. 10. 28. 오전 06:03 |
| 데이터 | Markdown JSON |
2026. 10. 28. 오전 12:36, GitHub Advisory Database에서 "vLLM: Request-controlled mm_processor_kwargs.code_revision allows remote code execution"을(를) 게시했습니다 (유형: 취약점 권고). 심각도는 "높음"(high)입니다. 관련 기술: Python. CVE: CVE-2026-114053.