CVE-2026-90553

[CVE catalog]

A flaw was found in vLLM. The LlavaOnevision2 processor loader incorrectly ignores the `trust_remote_code` parameter, which is designed to prevent the execution of untrusted code. This oversight allows an attacker to craft a malicious model containing arbitrary code. When such a model is loaded, the code executes with the vLLM process's authority, leading to remote code execution. vllm: vLLM: Remote Code Execution via LlavaOnevision2 processor ignoring trust_remote_code This vulnerability is rated as Important. It allows for arbitrary code execution within the vLLM process when loading a crafted model, even if the `trust_remote_code` parameter is explicitly set to `False`. This bypasses an intended security control, enabling an attacker to execute malicious code if a user is coerced into loading an untrusted model. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Severity

High · CVSS 8.5CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Published

Sep 12, 2026, 12:08:56 PM UTC

Updated

Sep 12, 2026, 1:16:53 PM UTC

Source

[NVD] · [CVE record]

EPSS

0.31% · Oct 27, 2026

{
  "package_releases": [],
  "fixed_versions": [],
  "distribution_packages": [
    {
      "name": "vllm",
      "ranges": [
        {
          "fixed": "0.28.0",
          "introduced": "",
          "last_affected": "",
          "start_excluding": ""
        }
      ],
      "ecosystem": "cpe",
      "fixed_version": "0.28.0",
      "provider_record_id": "NVD-CVE-2026-90553"
    },
    {
      "name": "vllm",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.28.0"
            }
          ]
        }
      ],
      "ecosystem": "PyPI",
      "fixed_version": "0.28.0",
      "provider_record_id": "PYSEC-2026-3985"
    }
  ]
}