Externally Controlled Reference to a Resource in Another Sphere in vLLM - CVE-2026-54232

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code.

The vulnerability exists due to improper control of package resolution in docker/Dockerfile when building the Docker image with dependency installation from multiple package indexes. A remote attacker can publish a malicious package with the expected name and version on PyPI to execute arbitrary code.

User interaction is required to build the affected Docker image.

Affected software

How to mitigate CVE-2026-54232

External References

• https://github.com/vllm-project/vllm/security/advisories/GHSA-jrf6-vqxq-pjv2
• https://github.com/vllm-project/vllm/pull/44366

Related Security Bulletins

• Externally Controlled Reference to a Resource in Another Sphere in vLLM