vLLM code_revision override remote-code-execution advisory

Evidence record

vLLM CVE-2026-114053 code_revision override advisory with an offline import-time PoC, requiring a dynamic AutoProcessor and trust_remote_code. Affected 0.7.3 through 0.30.x, fixed 0.31.0.

Read the original source ↗

Claim-level citations (3)

• supportsvLLM request metadata could override pinned model code revision for multimodal processing: CVE-2026-114053 documents request-controlled mm_processor_kwargs.code_revision affecting the vLLM model-code trust boundary.

  Advisory title and vulnerability description

• supportsvLLM request metadata could override pinned model code revision for multimodal processing: The advisory describes remote code execution conditioned on the vulnerable dynamic code-loading path, not arbitrary execution on every vLLM installation.

  Advisory; affected conditions and patch guidance

• supportsvLLM request metadata could override pinned model code revision for multimodal processing: The advisory requires a dynamic auto_map processor and enabled trust_remote_code; it identifies 0.31.0 as patched and demonstrates import-time execution in an offline proof of concept.

  Affected configuration, Summary and Patched versions, GHSA-h3rc-6mm3-gc2m