CVE-2026-22807: vLLM affected by RCE via auto_map dynamic module loading during model initialization
(updated )
vLLM loads Hugging Face auto_map dynamic modules during model resolution without gating on trust_remote_code, allowing attacker-controlled Python code in a model repo/path to execute at server startup.
References
- access.redhat.com/errata/RHSA-2026:10184
- access.redhat.com/errata/RHSA-2026:30087
- access.redhat.com/errata/RHSA-2026:30088
- access.redhat.com/errata/RHSA-2026:30089
- access.redhat.com/errata/RHSA-2026:3461
- access.redhat.com/errata/RHSA-2026:3462
- access.redhat.com/errata/RHSA-2026:3713
- access.redhat.com/errata/RHSA-2026:3782
- access.redhat.com/errata/RHSA-2026:42644
- access.redhat.com/errata/RHSA-2026:5119
- access.redhat.com/security/cve/CVE-2026-22807
- bugzilla.redhat.com/show_bug.cgi?id=2431865
- github.com/advisories/GHSA-2pc9-4j83-qjmr
- github.com/pypa/advisory-database/tree/main/vulns/vllm/PYSEC-2026-2010.yaml
- github.com/vllm-project/vllm
- github.com/vllm-project/vllm/commit/78d13ea9de4b1ce5e4d8a5af9738fea71fb024e5
- github.com/vllm-project/vllm/pull/32194
- github.com/vllm-project/vllm/releases/tag/v0.14.0
- github.com/vllm-project/vllm/security/advisories/GHSA-2pc9-4j83-qjmr
- nvd.nist.gov/vuln/detail/CVE-2026-22807
- pypi.org/project/vllm
- security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-22807.json
Code Behaviors & Features
Detect and mitigate CVE-2026-22807 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →