—

PYSEC-2026-3985

Quick fix

PYSEC-2026-3985 — vllm: upgrade to the fixed version with the command below.

pip install --upgrade 'vllm>=0.28.0'

Details

vLLM before 0.28.0 contains a remote code execution vulnerability in the LlavaOnevision2 processor loader that ignores the trust_remote_code parameter when loading remote processor classes. Attackers can craft a malicious model with arbitrary code in processing_llava_onevision2.py that executes with vLLM process authority even when trust_remote_code is set to False.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/vllm

Introduced in: 0Fixed in: 0.28.0

Fixpip install --upgrade 'vllm>=0.28.0'

References

https://github.com/vllm-project/vllm/security/advisories/GHSA-3c86-2m5g-59q7[ADVISORY]
https://www.vulncheck.com/advisories/vllm-before-0.28.0-remote-code-execution-via-llavaonevision2-processor[ADVISORY]