Code Injection in vLLM - CVE-2026-114053

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code.

The vulnerability exists due to improper control of code generation in vLLM processor construction when processing multimodal requests containing request-controlled mm_processor_kwargs.code_revision. A remote attacker can send a multimodal request that selects an attacker-controlled processor code revision to execute arbitrary code.

Exploitation requires a served model whose processor uses dynamic auto_map code, trust_remote_code to be enabled, and access to an attacker-controlled revision in the served model repository.

Affected software

How to mitigate CVE-2026-114053

External References

• https://github.com/vllm-project/vllm/security/advisories/GHSA-h3rc-6mm3-gc2m
• https://github.com/vllm-project/vllm/commit/570735520942b6428ae98f1eb442c6d88adae55e

Related Security Bulletins

• Multiple vulnerabilities in vLLM