A vulnerability, classified as critical, has been found in vllm up to 0.17.x affecting the trust_remote_code function of the Model Handler component, leading to protection mechanism failure.
| Vendor | Product | Versions |
|---|---|---|
| vllm-project | vllm | >= 0.10.1, < 0.18.0, 0.17.x |
Updated description with new details about the Model Handler component and clarified that no exploit is available.
Updated severity to CRITICAL, marked as actively exploited, and specified patch version 0.18.0.
Initial creation
