PT-2026-3865 · Hugging Face+1 · Hugging Face Auto Map+1

Arthurgervais + 1 · Publicado 2026-01-21 · Atualizado 2026-01-30 · CVE-2026-22807

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions vLLM versions 0.10.1 through 0.13.x

Description vLLM is an inference and serving engine for large language models (LLMs). The software loads Hugging Face auto map dynamic modules during model resolution without verifying trust remote code. This allows attacker-controlled Python code within a model repository or path to execute when the server starts. An attacker who can control the model repository or path can achieve arbitrary code execution on the vLLM host during model loading. This occurs before any request handling and does not require API access. The auto map resolution in vllm/model executor/models/registry.py and the execution of code through get class from dynamic module in vllm/transformers utils/dynamic module.py are relevant to this issue.

Recommendations Upgrade to vLLM version 0.14.0 or later. Audit any custom Hugging Face models loaded in your ML pipeline.

Exploit

Correção

RCE

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2026-22807

GHSA-2PC9-4J83-QJMR

Produtos afetados

Hugging Face Auto Map

Vllm

Referências · 20

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/22xxx/CVE-2026-22807.json · Exploit
• https://github.com/vllm-project/vllm · Nota
• https://github.com/vllm-project/vllm/releases/tag/v0.14.0 · Nota
• https://github.com/vllm-project/vllm/commit/78d13ea9de4b1ce5e4d8a5af9738fea71fb024e5 · Correção
• https://github.com/vllm-project/vllm/security/advisories/GHSA-2pc9-4j83-qjmr · Aviso do Fabricante
• https://github.com/vllm-project/vllm/pull/32194 · Correção
• https://twitter.com/TheHackerWire/status/2014100107843739669 · Publicação no Twitter
• https://twitter.com/HatforceSec/status/2014265936853795116 · Publicação no Twitter
• https://twitter.com/pulsepatchio/status/2014348854070505822 · Publicação no Twitter
• https://twitter.com/HatforceSec/status/2014022938819748291 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-22807 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-22807 · Nota de Segurança
• https://twitter.com/VulmonFeeds/status/2014133348541587665 · Publicação no Twitter
• https://twitter.com/CveFindCom/status/2014128266014076937 · Publicação no Twitter
• https://t.me/cveNotify/150404 · Publicação no Telegram