Easily map the attack path and prioritize which CVEs are a threat to your organization
Miggo AIGenerate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance
Miggo AIRoot Cause AnalysisThe vulnerability lies in the __init__ method of the Nemotron_Nano_VL_Config class, located in the now-removed file vllm/transformers_utils/configs/nemotron_vl.py. The commit ffb08379d8870a1a81ba82b72797f196838d0c86 addresses the vulnerability by completely removing this file and the associated configuration class. The core of the issue is the unchecked use of get_class_from_dynamic_module which, when processing a model's configuration, could be tricked into loading and executing code from a malicious repository specified in the auto_map field of a config.json file. This happens even when trust_remote_code is set to False, bypassing a critical security control. The vulnerable function, Nemotron_Nano_VL_Config.__init__, directly processes this malicious configuration, making it the entry point for the remote code execution.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| vllm | pip | < 0.11.1 | 0.11.1 |
