CVE-2026-27893 Details

A remote code execution vulnerability exists in vLLM, an inference and serving engine for large language models, in versions 0.10.1 prior to 0.18.0. The issue arises because two model implementation files hardcode the trust_remote_code parameter to True when loading sub-components. This bypasses the user's explicit opt-out choice, allowing remote code execution through malicious model repositories, even when remote code trust has been disabled. The vulnerability has been patched in vLLM version 0.18.0.

Users can update to vLLM version 0.18.0 or later, where this vulnerability has been fixed.