{"data":{"id":"0f16f139-cafd-4327-889a-2bb9c918e2c9","title":"CVE-2025-66448: vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.11.1, vllm has a critical remote…","summary":"vLLM versions prior to 0.11.1 contain a critical remote code execution flaw in the Nemotron_Nano_VL_Config config class. When a model config includes an auto_map entry, the class calls get_class_from_dynamic_module(...) and instantiates the returned class, which fetches and runs Python from the referenced remote repository, even when trust_remote_code=False is set in vllm.transformers_utils.config.get_config. An attacker can publish a benign-looking frontend repo whose config.json points to a malicious backend repo, so loading the frontend silently executes the backend's code on the victim host.","solution":"Fixed in 0.11.1.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-66448","publishedAt":"2025-12-02T04:15:54.213Z","cveId":"CVE-2025-66448","cweIds":["CWE-94"],"cvssScore":"7.1","cvssSeverity":"high","severity":"high","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":["vllm@< 0.11.1 (fixed: 0.11.1)"],"affectedPackageNames":["vllm"],"affectedPackageRefs":["pypi:vllm"],"affectedVendors":[],"affectedVendorsRaw":["vLLM"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"vLLM remote code execution through Nemotron_Nano_VL_Config auto_map entry","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00708,"epssCheckedAt":"2026-11-04T18:09:14.312Z","kevDateAdded":null,"advisoryAliases":["GHSA-8fr4-5q9j-m8gm"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:51:51.554Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2025-11-19T01:55:10.996Z","daysToFix":-13,"fixCheckedAt":"2026-10-29T21:42:26.116Z","capecIds":["CAPEC-242"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"inference","llmSpecific":true,"classifierConfidence":0.97,"researchCategory":null,"atlasIds":["AML.T0010"],"fixes":[{"ecosystem":"pypi","name":"vllm","fixedVersion":"0.11.1","matchedVersion":"0.11.1","fixReleasedAt":"2025-11-19T01:55:10.996Z","daysToFix":-13,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:42:25.967Z"}]}}