Skip to content
Threat Feed
Subscribe

Tag

Model-Inference

1 brief RSS
high advisory

Remote Code Execution in vLLM LlavaOnevision2 Processor Loader

A vulnerability in vLLM versions prior to 0.28.0 allows remote code execution by bypassing the trust_remote_code parameter during the loading of malicious LlavaOnevision2 processor classes.

vLLM +1 remote-code-execution model-inference supply-chain denial-of-service vulnerability inference-engine cve-2026-94624
1r 3t 1c updated