vLLM CVE-2026-22778 - vLLM Spawning Windows Shells

Ibrahim Saud@tektrix

•updated Jun 20, 2026•1•0•11

Detects vLLM processes spawning Windows shells (cmd.exe, powershell.exe, pwsh.exe) if hosted in a Windows context, indicating potential exploitation of CVE-2026-22778 for remote code execution.