CVE-2026-90553: high-severity vulnerability in vllm-project vLLM
vLLM before 0.28.0 Remote Code Execution via LlavaOnevision2 processor
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.5epss 0.3%
vLLM before 0.28.0 contains a remote code execution vulnerability in the LlavaOnevision2 processor loader that ignores the trust_remote_code parameter when loading remote processor classes. Attackers can craft a malicious model with arbitrary code in processing_llava_onevision2.py that executes with vLLM process authority even when trust_remote_code is set to False.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
vllm-project · vLLMRelated CVEs — vllm-project vLLM
In the same product, most dangerous first.
CVE-2026-103241MEDIUMvllm-project vLLM Gemma4UnifiedParser gemma4.rs denial of serviceEPSS 0.7%CVE-2026-92220MEDIUMvllm-project vLLM MoRIIO Acknowledgement moriio_connector.py MoRIIOWrapper._handle_release_message resource consumptionEPSS 0.7%CVE-2026-90878MEDIUMvllm-project vLLM Jinja Template Rendering completions resource consumptionEPSS 0.5%CVE-2026-90555HIGHvLLM before 0.28.0 Denial of Service via Audio HeaderEPSS 0.5%CVE-2026-105922MEDIUMvllm-project vLLM Penalty utils.py get_token_bin_counts_and_mask denial of serviceEPSS 0.3%CVE-2026-105775MEDIUMvllm-project vLLM Completions Request mamba_mixer2.py conv_ssm_forward out-of-boundsEPSS 0.3%