Bug 2532579 (CVE-2026-90553) - CVE-2026-90553 vllm: vLLM: Remote Code Execution via LlavaOnevision2 processor ignoring trust_remote_code
Summary: CVE-2026-90553 vllm: vLLM: Remote Code Execution via LlavaOnevision2 processo...
Keywords:
Status: NEW
Alias: CVE-2026-90553
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
high
high
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-09-12 12:22 UTC by OSIDB Bzimport
Modified: 2026-09-12 12:30 UTC (History)
4 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2026-09-12 12:22:29 UTC 
vLLM before 0.28.0 contains a remote code execution vulnerability in the LlavaOnevision2 processor loader that ignores the trust_remote_code parameter when loading remote processor classes. Attackers can craft a malicious model with arbitrary code in processing_llava_onevision2.py that executes with vLLM process authority even when trust_remote_code is set to False.
Note You need to log in before you can comment on or make changes to this bug.