Protection Mechanism Failure in vLLM - CVE-2026-27893

Detailed vulnerability description

The vulnerability allows a remote attacker to execute arbitrary code.

The vulnerability exists due to protection mechanism failure in NemotronVL and KimiK25 model implementation files when loading model sub-components from a malicious model repository. A remote attacker can supply a malicious model repository to execute arbitrary code.

User interaction is required because the malicious model must be loaded by vLLM. The issue bypasses the user's explicit trust_remote_code=false security opt-out by hardcoding trust_remote_code=true in affected code paths.

How to mitigate CVE-2026-27893

Sources

• https://github.com/vllm-project/vllm/security/advisories/GHSA-7972-pg2x-xr59
• https://github.com/advisories/GHSA-7972-pg2x-xr59