{"data":{"id":"cba2a887-3f39-45c0-a9ef-bde286c34c5d","title":"CVE-2026-27893: vLLM is an inference and serving engine for large language models (LLMs). Starting in version 0.10.1 and prior to…","summary":"CVE-2026-27893 affects vLLM, an inference and serving engine for large language models, from version 0.10.1 before 0.18.0. Two model implementation files hardcode `trust_remote_code=True` when loading sub-components, overriding a user's explicit `--trust-remote-code=False` opt-out. This enables remote code execution through malicious model repositories even when remote code trust is disabled.","solution":"Version 0.18.0 patches the issue.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-27893","publishedAt":"2026-03-27T00:16:22.333Z","cveId":"CVE-2026-27893","cweIds":["CWE-693"],"cvssScore":"8.8","cvssSeverity":"high","severity":"high","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":["vllm@>= 0.10.1, < 0.18.0 (fixed: 0.18.0)"],"affectedPackageNames":["vllm"],"affectedPackageRefs":["pypi:vllm"],"affectedVendors":[],"affectedVendorsRaw":["vLLM"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"vLLM remote code execution through hardcoded trust_remote_code in model loading","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"required","exploitMaturity":"unknown","epssScore":0.01369,"epssCheckedAt":"2026-11-10T00:11:23.429Z","kevDateAdded":null,"advisoryAliases":["GHSA-7972-pg2x-xr59"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:50:12.637Z","patchAvailable":true,"disclosureDate":"2026-03-27T00:16:22.333Z","fixReleasedAt":"2026-03-20T22:16:00.336Z","daysToFix":-7,"fixCheckedAt":"2026-10-29T21:39:27.657Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"inference","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":["AML.T0010"],"fixes":[{"ecosystem":"pypi","name":"vllm","fixedVersion":"0.18.0","matchedVersion":"0.18.0","fixReleasedAt":"2026-03-20T22:16:00.336Z","daysToFix":-7,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:39:27.512Z"}]}}