CVE-2026-22807

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2026-22807

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-22807.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-22807

Aliases

GHSA-2pc9-4j83-qjmr

Related

Published

2026-01-21T21:13:11.894Z

Modified

2026-01-23T05:51:01.002860Z

Severity

8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator

Summary

vLLM affected by RCE via auto_map dynamic module loading during model initialization

Details

vLLM is an inference and serving engine for large language models (LLMs). Starting in version 0.10.1 and prior to version 0.14.0, vLLM loads Hugging Face auto_map dynamic modules during model resolution without gating on trust_remote_code, allowing attacker-controlled Python code in a model repo/path to execute at server startup. An attacker who can influence the model repo/path (local directory or remote Hugging Face repo) can achieve arbitrary code execution on the vLLM host during model load. This happens before any request handling and does not require API access. Version 0.14.0 fixes the issue.

Database specific

{
    "cwe_ids": [
        "CWE-94"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/22xxx/CVE-2026-22807.json",
    "cna_assigner": "GitHub_M"
}

References

Affected packages

Git / github.com/vllm-project/vllm

Affected ranges

Type: GIT
Repo: https://github.com/vllm-project/vllm
Events: Introduced

aab549870df50edf0512f0a59b574f692f546465

Fixed

b17039bccc17b94a2ea107272ad7bc93508708df

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-22807.json"