CVE-2026-27893 | vllm up to 0.17.x Model trust_remote_code protection mechanism (GHSA-7972-pg2x-xr59)

March 27, 2026 Yanac

A vulnerability, which was classified as critical, has been found in vllm up to 0.17.x. This affects the function trust_remote_code of the component Model Handler. The manipulation leads to protection mechanism failure.

This vulnerability is referenced as CVE-2026-27893. Remote exploitation of the attack is possible. No exploit is available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More