CVE-2026-90553— vLLM before 0.28.0 Remote Code Execution via LlavaOnevision2 processor

Quick assessment

Copy summary Copy citation

Affected

vllm-project vLLM

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

vLLM 在 0.28.0 之前版本中，其 LlavaOnevision2 处理器加载器中存在一个远程代码执行（RCE）漏洞：在加载远程处理器类时，加载器会忽略 参数。攻击者可以构造一个恶意模型，在 文件中植入任意代码，即使将 设置为 False，该代码仍能获得 vLLM 进程的权限并执行。

CVE-2026-90553 affects vllm-project vLLM. No confirmed in-the-wild exploitation; assess based on exposure. vLLM 在 0.28.0 之前版本中，其 LlavaOnevision2 处理器加载器中存在一个远程代码执行（RCE）漏洞：在加载远程处理器类时，加载器会忽略 参数。攻击者可以构造一个恶意模型，在 文件中植入任意代码，即使将 设置为 False，该代码仍能获得 vLLM 进程的权限并执行。 CVE-2026-90553 vulnerability details, Shenlong CVE Platform, https://cve.imfht.com/detail/CVE-2026-90553

I. Basic Information for CVE-2026-90553

Affected Products

II. Public POCs for CVE-2026-90553

III. Intelligence Information for CVE-2026-90553

Vendor Advisories for CVE-2026-90553 (2)

• 🔗 LlavaOnevision2 processor loader executes attacker model code with `trust_remote_code=False` (inert `trust_remote_code` kwarg to `transformers.get_class_from_dynamic_module`) — RCE from a malicious model · Advisory · vllm-project/vllm · GitHub Read full article vendor-advisory
• 🔗 vLLM before 0.28.0 Remote Code Execution via LlavaOnevision2 processor | Advisories | VulnCheck third-party-advisory

• https://www.cve.org/CVERecord?id=CVE-2026-90553

Same Patch Batch · vllm-project · 2026-09-12 · 3 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2026-90553