Docker Model Runner (vllm-metal backend): `trust_remote_code=True` set unconditionally, no sandbox

CVE-2026-5817AI/ML frameworks & servingcurated

Impact

trust_remote_code=True set unconditionally, no sandbox → tokenizer code executes

Who can reach it

Customer-supplied model repo

What to do

Rebuild/patch; no operator config can disable it

References

https://nvd.nist.gov/vuln/detail/CVE-2026-5817

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.