¡¾Îó²îͨ¸æ¡¿vLLM trust_remote_codeÈÆ¹ýÔ¶³Ì´úÂëÖ´ÐÐÎó²î(CVE-2026-27893)

Ðû²¼Ê±¼ä 2026-03-27

Ò»¡¢Îó²î¸ÅÊö


Îó²îÃû³Æ

vLLM trust_remote_codeÈÆ¹ýÔ¶³Ì´úÂëÖ´ÐÐÎó²î

CVE   ID

CVE-2026-27893

Îó²îÀàÐÍ

RCE

·¢Ã÷ʱ¼ä

2026-3-27

Îó²îÆÀ·Ö

8.8

Îó²îÆ·¼¶

¸ßΣ

¹¥»÷ÏòÁ¿

ÍøÂç

ËùÐèȨÏÞ

ÎÞ

ʹÓÃÄѶÈ

µÍ

Óû§½»»¥

ÐèÒª

PoC/EXP

δ¹ûÕæ

ÔÚҰʹÓÃ

δ·¢Ã÷


vLLMÊÇÒ»¸ö¸ßÐÔÄܵĴóÄ£×ÓÍÆÀí¿ò¼Ü£¬×¨Îª´ó¹æÄ£ÓïÑÔÄ£×ӵĸßÍÌÍÂÁ¿¡¢µÍÑÓ³Ù°²ÅŶøÉè¼Æ¡£Æä½¹µãÌØÕ÷°üÀ¨PagedAttention¸ßЧÄÚ´æ¹ÜÀí¡¢²¢Ðл¯µ÷ÀíÓÅ»¯ÒÔ¼°¶Ô¶àGPU¡¢ÂþÑÜʽÇéÐεÄÓÅÒìÖ§³Ö¡£vLLM¼æÈÝHugging Face½Ó¿Ú£¬±ãÓÚÄ£×Ó¿ìËÙ¼ÓÔØÓ뼯³É£¬ÆÕ±éÓÃÓÚÍÆÀí·þÎñ¡¢AIÓ¦Óúó¶ËÓëÉú²ú¼¶Ä£×Ó°²Åų¡¾°¡£


2026Äê3ÔÂ27ÈÕ£¬×ðÁú¿­¹ÙÍøÈë¿ÚÇå¾²Ó¦¼±ÏìÓ¦ÖÐÐÄ£¨VSRC£©¼à²âµ½vLLM trust_remote_codeÈÆ¹ýÔ¶³Ì´úÂëÖ´ÐÐÎó²î¡£¸ÃÎó²î±£´æÓÚvllm/model_executor/models/nemotron_vl.pyºÍvllm/model_executor/models/kimi_k25.pyÎļþÖУ¬ÓÉÓÚ´úÂëÖÐÓ²±àÂëÉèÖÃtrust_remote_code=True£¬µ¼ÖÂÓû§ÏÔʽÉèÖÃtrust-remote-code=False±»Èƹý¡£¹¥»÷Õß¿Éͨ¹ý½á¹¹¶ñÒâHuggingFaceÄ£×Ó¿ÍÕ»£¬ÔÚÄ£×Ó¼ÓÔØÀú³ÌÖÐÖ´ÐÐí§ÒâPython´úÂ룬»ñÈ¡·þÎñÆ÷Ö´ÐÐȨÏÞ£¬½ø¶øÊµÏÖϵͳ¿ØÖÆ¡¢Êý¾ÝÇÔÈ¡»òºáÏòÒÆ¶¯¡£¸ÃÎó²îÆÆËðÁËtrust_remote_codeÇå¾²»úÖÆµÄÐÅÈνçÏߣ¬¿ÉÄܵ¼ÖÂÃô¸ÐÊý¾Ýй¶¼°·þÎñ±»ÍêÈ«½ÓÊÜ£¬±£´æ½Ï¸ßºÏ¹æÎ£º¦¡£


¶þ¡¢Ó°Ïì¹æÄ£


vLLM >=0.10.1


Èý¡¢Çå¾²²½·¥


3.1 Éý¼¶°æ±¾


¹Ù·½ÒÑÐû²¼ÐÞ¸´²¹¶¡£¬ÒÔÐÞ¸´¸ÃÎó²î¡£
vLLM >= 0.18.0


ÏÂÔØÁ´½Ó£ºhttps://github.com/vllm-project/vllm/releases/


3.2 ÔÝʱ²½·¥


ÔÝÎÞ¡£


3.3 ͨÓý¨Òé


? °´ÆÚ¸üÐÂϵͳ²¹¶¡£¬ïÔ̭ϵͳÎó²î£¬ÌáÉý·þÎñÆ÷µÄÇå¾²ÐÔ¡£
ÔöǿϵͳºÍÍøÂçµÄ»á¼û¿ØÖÆ£¬Ð޸ķÀ»ðǽսÂÔ£¬¹Ø±Õ·ÇÐëÒªµÄÓ¦Óö˿ڻò·þÎñ£¬ïÔÌ­½«Î£ÏÕ·þÎñ£¨ÈçSSH¡¢RDPµÈ£©Ì»Â¶µ½¹«Íø£¬ïÔÌ­¹¥»÷Ãæ¡£
ʹÓÃÆóÒµ¼¶Çå¾²²úÆ·£¬ÌáÉýÆóÒµµÄÍøÂçÇå¾²ÐÔÄÜ¡£
ÔöǿϵͳÓû§ºÍȨÏÞ¹ÜÀí£¬ÆôÓöàÒòËØÈÏÖ¤»úÖÆºÍ×îСȨÏÞÔ­Ôò£¬Óû§ºÍÈí¼þȨÏÞÓ¦¼á³ÖÔÚ×îµÍÏÞ¶È¡£

ÆôÓÃÇ¿ÃÜÂëÕ½ÂÔ²¢ÉèÖÃΪ°´ÆÚÐ޸ġ£


3.4 ²Î¿¼Á´½Ó


https://github.com/vllm-project/vllm/security/advisories/GHSA-7972-pg2x-xr59/