Insufficient verification of data authenticity in vLLM - CVE-2026-47155

Detailed vulnerability description

The vulnerability allows a remote attacker to cause pinned deployments to load unpinned code, weights, and processors.

The vulnerability exists due to insufficient verification of data authenticity in artifact revision pinning across model loaders and dynamic module resolution when resolving model-related artifacts from repositories. A remote attacker can modify or rely on mutable unpinned secondary artifacts to cause pinned deployments to load unpinned code, weights, and processors.

This affects supported loader paths where explicit model or code revision pins are not consistently propagated to secondary artifacts such as dynamic modules, GGUF files, image processors, and same-repository subfolder resources.

How to mitigate CVE-2026-47155

Sources

• https://github.com/vllm-project/vllm/security/advisories/GHSA-3ww4-5jv9-j5gm
• https://github.com/vllm-project/vllm/pull/42616