{"data":{"id":"de67dcb7-b19f-4864-867e-55bd4b21a0fd","title":"CVE-2026-90553: vLLM before 0.28.0 contains a remote code execution vulnerability in the LlavaOnevision2 processor loader that ignores t","summary":"vLLM (a tool for running large language models efficiently) versions before 0.28.0 have a remote code execution vulnerability (a flaw that lets attackers run their own code on a system) in the LlavaOnevision2 processor loader. Even when a user sets trust_remote_code to False (a safety setting meant to prevent loading untrusted code), the vulnerability ignores this setting and allows attackers to execute malicious code by hiding it in a model file.","solution":"Update vLLM to version 0.28.0 or later.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-90553","publishedAt":"2026-09-12T13:16:53.887Z","cveId":"CVE-2026-90553","cweIds":["CWE-94"],"cvssScore":"7.8","cvssSeverity":"high","severity":"high","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":["HuggingFace"],"affectedVendorsRaw":["vLLM"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"local","attackComplexity":"low","privilegesRequired":"none","userInteraction":"required","exploitMaturity":"unknown","epssScore":0,"patchAvailable":null,"disclosureDate":"2026-09-12T13:16:53.887Z","capecIds":["CAPEC-242"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","confidentiality","availability"],"aiComponentTargeted":"framework","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":["AML.T0010"]}}