vLLM multimodal requests can specify a processor code version, leading to remote code execution; NVD records it as CVE-2026-114053 (CVSS 4.0 9.2)

NVD has recorded the vLLM remote code execution vulnerability CVE-2026-114053, with a CVSS 4.0 base score of 9.2 and a severity of Critical. The record states that vLLM versions from 0.7.3 to before 0.31.0 pass mm_processor_kwargs.code_revision from the request as-is to Transformers' AutoProcessor.from_pretrained; when the operator enables trust_remote_code, an attacker who controls a version of the served model repository can send a multimodal request to the unauthenticated /tokenize endpoint and execute arbitrary Python in the vLLM API process, classified as CWE-94.