PT-2026-44487 · Vllm · Vllm-Project/Vllm

Published 2026-05-28 · Updated 2026-05-28 · CVE-2026-4944

X.com · Cvenew

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVE-2026-4944 vllm-project/vllm version 0.14.1 contains a vulnerability where the trust remote code=True parameter is hardcoded in two model implementation files (`vllm/model execu… https://t.co/nRpO1ZSWza

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-4944

Affected Products

Vllm-Project/Vllm

References · 3

• 🔥 https://huntr.com/bounties/97f706f7-a852-49b2-a4eb-76811e611daf · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-4944 · Security Note
• https://twitter.com/CVEnew/status/2060091960111542628 · Twitter Post