CVE-2026-22807

CVE-2026-22807 is a critical vulnerability affecting vLLM versions 0.10.1 through 0.13.x, where the engine loads untrusted dynamic modules from Hugging Face during model resolution without proper security checks. This allows an attacker to achieve arbitrary code execution on the vLLM host by influencing the model repository or path, even before any API requests are processed. With a CVSS score of 9.8 (Critical), this vulnerability has a network attack vector, low attack complexity, and results in complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, indicating awareness and potential for future exploitation.