Skip to content
Threat Feed
Subscribe

Product

VLLM (< 0.28.0)

1 brief RSS
high advisory

Remote Code Execution in vLLM LlavaOnevision2 Processor Loader

A vulnerability in vLLM versions prior to 0.28.0 allows remote code execution by bypassing the trust_remote_code parameter during the loading of malicious LlavaOnevision2 processor classes.

vLLM +2 remote-code-execution model-inference supply-chain denial-of-service vulnerability
1r 2t 1c updated