vLLM Fetching Remote Media - CVE-2026-22778

Ibrahim Saud@tektrix

•updated Jun 20, 2026•0•0•6

Detects vLLM establishing outbound network connections to fetch external media files (e.g., .mov, .mp4, .jp2) from non-private IP addresses. This activity may indicate exploitation of CVE-2026-22778, allowing for remote code execution by fetching malicious content.