CVE-2026-27893High· 8.8▾ TwilightvLLM is an inference and serving engine for large language models (LLMs). Starting in version 0.10.1 and prior to version 0.18.0, two model implementation files hardcode `trust_remote_code=True` when loading sub-components, bypassing the…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 48.4 · likelihood 0.3 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 8.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
1.4%
vLLM is an inference and serving engine for large language models (LLMs). Starting in version 0.10.1 and prior to version 0.18.0, two model implementation files hardcode trust_remote_code=True when loading sub-components, bypassing the user's explicit --trust-remote-code=False security opt-out. This enables remote code execution via malicious model repositories even when the user has explicitly disabled remote code trust. Version 0.18.0 patches the issue.
vllm >= 0.10.1, < 0.18.0Upgrade past the affected range:
vllm 0.18.0Affected packages:
vllm >= 0.10.1, < 0.18.0Patched in:
vllm 0.18.0Connected by shared product, vendor, weakness, or advisory.
CVE-2026-24779High· 7.1vLLM is an inference and serving engine for large language models (LLMs)
CVE-2026-48746Critical· 9.1vLLM is an inference and serving engine for large language models (LLMs)
CVE-2026-22778Critical· 9.8vLLM is an inference and serving engine for large language models (LLMs)
CVE-2026-69147Medium· 6.5vLLM is an inference and serving engine for large language models
CVE-2026-57173Medium· 6.5vLLM is an inference and serving engine for large language models
CVE-2026-73558Medium· 5.3vLLM is an inference and serving engine for large language models