CVE-2026-114053— vLLM 0.7.3 before 0.31.0 RCE via mm_processor_kwargs.code_revision

Quick assessment

Copy summary Copy citation

Affected

vllm-project vllm

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 vLLM 0.7.3 至 0.31.0（不含）版本中，客户端提供的 参数会被直接转发给 Transformers 的 方法。当启用 时，这允许客户端选择要导入的模型动态处理器代码的特定修订版本。若攻击者能够控制所服务模型仓库中的某个修订版本，即可向未认证的 端点发送多模态请求，从而在 vLLM API 进程中执行任意 Python 代码。

CVE-2026-114053 affects vllm-project vllm. No confirmed in-the-wild exploitation; assess based on exposure. 在 vLLM 0.7.3 至 0.31.0（不含）版本中，客户端提供的 参数会被直接转发给 Transformers 的 方法。当启用 时，这允许客户端选择要导入的模型动态处理器代码的特定修订版本。若攻击者能够控制所服务模型仓库中的某个修订版本，即可向未认证的 端点发送多模态请求，从而在 vLLM API 进程中执行任意 Python 代码。 CVE-2026-114053 vulnerability details, Shenlong CVE Platform, https://cve.imfht.com/detail/CVE-2026-114053

I. Basic Information for CVE-2026-114053

Affected Products

II. Public POCs for CVE-2026-114053

III. Intelligence Information for CVE-2026-114053

Patches & Fixes for CVE-2026-114053 (1)

• 🔗 [Bugfix][MLA] Fix BLHNC addressing for FlashInfer sparse MLA (#54465) · vllm-project/vllm@5707355 · GitHub Read full article patch

Vendor Advisories for CVE-2026-114053 (2)

• 🔗 Request-controlled mm_processor_kwargs.code_revision allows remote code execution · Advisory · vllm-project/vllm · GitHub Read full article vendor-advisory
• 🔗 vLLM 0.7.3 before 0.31.0 RCE via mm_processor_kwargs.code_revision | Advisories | VulnCheck third-party-advisory

• https://www.cve.org/CVERecord?id=CVE-2026-114053

Same Patch Batch · vllm-project · 2026-10-21 · 7 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2026-114053