Ò»¡¢¡¢·ì϶¸ÅÊö
·ì϶Ãû³Æ | vLLM trust_remote_codeÈƹýÔ¶³Ì´úÂëÖ´Ðзì϶ |
CVE ID | CVE-2026-27893 |
·ì϶ÀàÐÍ | RCE | ·¢ÏÖ¹¦·ò | 2026-3-27 |
·ì϶ÆÀ·Ö | 8.8 | ·ì϶µÈ¼¶ | ¸ßΣ |
¹¥»÷ÏòÁ¿ | ÍøÂç | ËùÐèȨÏÞ | ÎÞ |
ÀûÓÃÄÑ¶È | µÍ | Óû§½»»¥ | ±ØÒª |
PoC/EXP | δ¹«¿ª | ÔÚÒ°ÀûÓà | δ·¢ÏÖ |
vLLMÊÇÒ»¸ö¸ß»úÄܵĴóÄ£ÐÍÍÆÀí¿ò¼Ü£¬ £¬£¬×¨Îª´ó¹æģ˵»°Ä£Ð͵ĸßÍÌÍÂÁ¿¡¢¡¢µÍÑÓ³¤²¿Êð¶øÉè¼Æ¡£ÆäÖ÷Ìâ¸öÐÔÔ̺¬PagedAttention¸ßЧÄÚ´æÖÎÀí¡¢¡¢²¢Ðл¯µ÷¶ÈÓÅ»¯ÒÔ¼°¶Ô¶àGPU¡¢¡¢É¢²¼Ê½»·¾³µÄÓÅÁ¼Ö§³Ö¡£vLLM¼æÈÝHugging Face½Ó¿Ú£¬ £¬£¬±ãÓÚÄ£Ðͼ±¾ç¼ÓÔØÓ뼯³É£¬ £¬£¬¿í·ºÓÃÓÚÍÆÀí·þÎñ¡¢¡¢AIÀûÓúó¶ËÓë³ö²ú¼¶Ä£ÐͲ¿Ê𳡾°¡£
2026Äê3ÔÂ27ÈÕ£¬ £¬£¬OG¶«·½Ìü°²È«Ó¦¼±ÏìÓ¦ÖÐÐÄ£¨VSRC£©¼à²âµ½vLLM trust_remote_codeÈƹýÔ¶³Ì´úÂëÖ´Ðзì϶¡£¸Ã·ì϶´æÔÚÓÚvllm/model_executor/models/nemotron_vl.pyºÍvllm/model_executor/models/kimi_k25.pyÎļþÖУ¬ £¬£¬ÓÉÓÚ´úÂëÖÐÓ²±àÂëÉèÖÃtrust_remote_code=True£¬ £¬£¬µ¼ÖÂÓû§ÏÔʽÅäÖÃtrust-remote-code=False±»Èƹý¡£¹¥»÷Õß¿Éͨ¹ý»ú¹Ø¶ñÒâHuggingFaceÄ£ÐͲֿ⣬ £¬£¬ÔÚÄ£ÐͼÓÔعý³ÌÖÐÖ´ÐÐËÁÒâPython´úÂ룬 £¬£¬»ñÈ¡·þÎñÆ÷Ö´ÐÐȨÏÞ£¬ £¬£¬½ø¶øʵÏÖϵͳ½ÚÖÆ¡¢¡¢Êý¾ÝÇÔÈ¡»òºáÏòÒƶ¯¡£¸Ã·ì϶·ÛËéÁËtrust_remote_code°²È«»úÖƵÄÐÅÀµÌìǵ£¬ £¬£¬¿ÉÄܵ¼ÖÂÃô¸ÐÊý¾Ýй¶¼°·þÎñ±»ÆëÈ«ÊÕÊÜ£¬ £¬£¬´æÔڽϸߺϹæ·çÏÕ¡£
¶þ¡¢¡¢Ó°ÏìÁìÓò
vLLM >=0.10.1
Èý¡¢¡¢°²È«´ëÊ©
3.1 Éý¼¶°æ±¾
¹Ù·½ÒÑ°ä²¼ÐÞ¸´²¹¶¡£¬ £¬£¬ÒÔÐÞ¸´¸Ã·ì϶¡£
ÏÂÔØÁ´½Ó£º£º£ºhttps://github.com/vllm-project/vllm/releases/
3.2 һʱ´ëÊ©
ÔÝÎÞ¡£
3.3 ͨÓý¨Òé
? ¶¨ÆÚ¸üÐÂϵͳ²¹¶¡£¬ £¬£¬Ï÷¼õϵͳ·ì϶£¬ £¬£¬ÌáÉý·þÎñÆ÷µÄ°²È«ÐÔ¡£? ¼ÓǿϵͳºÍÍøÂçµÄ½Ó¼û½ÚÖÆ£¬ £¬£¬Åú¸Ä·À»ðǽսÊõ£¬ £¬£¬¹Ø±Õ·Ç±ØÒªµÄÀûÓö˿ڻò·þÎñ£¬ £¬£¬Ï÷¼õ½«Î£ÏÕ·þÎñ£¨ÈçSSH¡¢¡¢RDPµÈ£©Â¶³öµ½¹«Íø£¬ £¬£¬Ï÷¼õ¹¥»÷Ãæ¡£? ʹÓÃÆóÒµ¼¶°²È«²úÆ·£¬ £¬£¬ÌáÉýÆóÒµµÄÍøÂ簲ȫ»úÄÜ¡£? ¼ÓǿϵͳÓû§ºÍȨÏÞÖÎÀí£¬ £¬£¬ÆôÓöà³É·ÖÈÏÖ¤»úÖƺÍ×îСȨÏÞ×¼Ôò£¬ £¬£¬Óû§ºÍÈí¼þȨÏÞӦά³ÖÔÚ×îµÍÏ޶ȡ£? ÆôÓÃÇ¿ÃÜÂëÕ½Êõ²¢ÉèÖÃΪ¶¨ÆÚÅú¸Ä¡£
3.4 ²Î¿¼Á´½Ó
https://github.com/vllm-project/vllm/security/advisories/GHSA-7972-pg2x-xr59/
¾©¹«Íø°²±¸11010802024551ºÅ