Database/AI/ML frameworks & serving
vLLM (HF `auto_map`): Loads Hugging Face dynamic modules during model resolution
CVSS 8.8CVE-2026-22807AI/ML frameworks & servingcurated
Impact
Loads Hugging Face dynamic modules during model resolution → code execution
Who can reach it
Customer-supplied or poisoned Hub model repo
What to do
Upgrade to 0.14.0+. Any trust_remote_code-adjacent path means the model repo is executable content
References
Related entries
- PyTorch (`weights_only` unpickler): Bypass of the `weights_only` allowlistCVE-2026-24747 · PyTorch (`weights_only` unpickler)High
- vLLM (hardcoded `trust_remote_code`, second instance): Same class, two more model files, through 0.18.0CVE-2026-27893 · vLLM (hardcoded `trust_remote_code`, second instance)High
- JupyterHub OAuthenticator: Authenticated user bypasses the intended identity checkCVE-2026-33175 · JupyterHub OAuthenticatorHigh
- LiteLLM (`/config/update`): Endpoint does not enforce admin authorizationCVE-2026-35029 · LiteLLM (`/config/update`)High
- BentoML (Dockerfile generation): Injection into generated DockerfileCVE-2026-35044 · BentoML (Dockerfile generation)High
- Jupyter Server: Path traversal in the REST APICVE-2026-35397 · Jupyter ServerHigh
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.