CVE Explorer

CVE-2026-4944

vllm-project/vllm version 0.14.1 contains a vulnerability where the `trust_remote_code=True` parameter is hardcoded in two model implementation files (`vllm/model_executor/models/nemotron_vl.py` and `vllm/model_executor/models/kimi_k25.py`). This bypasses the user's explicit `--trust-remote-code=False` setting, enabling remote code execution via malicious HuggingFace model repositories. This issue is an incomplete fix for CVE-2025-66448 and CVE-2026-22807, as it affects separate code paths in mo

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:66f6c764c4109f022e8f4962fc055afa1461251881337265bfda6bc4e442e961

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Affected products and versions

1 source assertion

{"product":"vllm-project/vllm","vendor":"vllm-project","versions":[{"lessThanOrEqual":"latest","status":"affected","version":"unspecified","versionType":"custom"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:9f8837f938279e3af533955b6ed52173c0c33664f6613abfbfa252983a4e3ea4 · sha256:52d4fa20a3f4bb6b… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion

{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.0"},"metric_type":"cvssV3_0"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:9f8837f938279e3af533955b6ed52173c0c33664f6613abfbfa252983a4e3ea4 · sha256:52d4fa20a3f4bb6b… · /containers/cna/metrics/0/cvssV3_0

CWE assertions

1 source assertion

{"cweId":"CWE-22","description":"CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:9f8837f938279e3af533955b6ed52173c0c33664f6613abfbfa252983a4e3ea4 · sha256:52d4fa20a3f4bb6b… · /containers/cna/problemTypes/0/descriptions/0

Source references

2 source assertions

{"url":"https://huntr.com/bounties/97f706f7-a852-49b2-a4eb-76811e611daf"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:9f8837f938279e3af533955b6ed52173c0c33664f6613abfbfa252983a4e3ea4 · sha256:52d4fa20a3f4bb6b… · /containers/cna/references/0

{"tags":["exploit"],"url":"https://huntr.com/bounties/97f706f7-a852-49b2-a4eb-76811e611daf"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:9f8837f938279e3af533955b6ed52173c0c33664f6613abfbfa252983a4e3ea4 · sha256:52d4fa20a3f4bb6b… · /containers/adp/0/references/0

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer