CVE-2026-90553: Vllm

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

vLLM before 0.28.0 contains a remote code execution vulnerability in the LlavaOnevision2 processor loader that ignores the trust_remote_code parameter when loading remote processor classes. Attackers can craft a malicious model with arbitrary code in processing_llava_onevision2.py that executes with vLLM process authority even when trust_remote_code is set to False.

Affected products

• Vllm Vllm: before 0.28.0 (fixed in 0.28.0)

Published 2026-09-12. Last modified 2026-09-16.