CVE-2026-114053 vLLM 0.7.3 before 0.31.0 RCE via mm_processor_kwargs.code_revision
- Exploited in the wild
- Not known
- Fix
- Available
What is CVE-2026-114053?
CVE-2026-114053 is a critical vulnerability in vllm-project vllm, published on 21 Oct 2026.
Official description
vLLM from 0.7.3 before 0.31.0 forwards the request-supplied mm_processor_kwargs.code_revision to Transformers AutoProcessor.from_pretrained, letting clients select which revision of a model's dynamic processor code is imported when trust_remote_code is enabled. An attacker controlling a revision in the served model repository can send a multimodal request to the unauthenticated /tokenize endpoint to execute arbitrary Python in the vLLM API process.
Weakness: CWE-94
Which versions are affected by CVE-2026-114053?
2 open source packages ship an affected version, including vllm.
| Package | Affected | Fixed in |
|---|---|---|
vllm PyPI | From 0.7.3 | 0.31.0 |
vllm PyPI | From 0.7.3 | 0.31.0 |
How do I fix CVE-2026-114053?
Upgrade vllm to 0.31.0 or later.
Is CVE-2026-114053 being exploited?
There is no known exploitation of CVE-2026-114053 in the wild and no public exploit code.
Sources
Also known as GHSA-h3rc-6mm3-gc2m.