From 00bd08edeee5dd4d4c13277c0114a464011acf72 Mon Sep 17 00:00:00 2001 From: Russell Bryant Date: Fri, 6 Mar 2026 01:15:19 -0500 Subject: [PATCH] [Security] Respect user trust_remote_code setting in NemotronVL and KimiK25 (#36192) Signed-off-by: Russell Bryant --- vllm/model_executor/models/kimi_k25.py | 3 ++- vllm/model_executor/models/nemotron_vl.py | 6 +++++- 2 files changed, 7 insertions(+), 2 deletions(-) diff --git a/vllm/model_executor/models/kimi_k25.py b/vllm/model_executor/models/kimi_k25.py index 248339337..35c7576c4 100644 --- a/vllm/model_executor/models/kimi_k25.py +++ b/vllm/model_executor/models/kimi_k25.py @@ -174,7 +174,8 @@ class KimiK25ProcessingInfo(BaseProcessingInfo): self.hf_config = self.get_hf_config() self.media_token_id = self.hf_config.media_placeholder_token_id media_processor = cached_get_image_processor( - self.ctx.model_config.model, trust_remote_code=True + self.ctx.model_config.model, + trust_remote_code=self.ctx.model_config.trust_remote_code, ) self.media_processor = media_processor self.hf_processor = MoonshotKimiVAutoProcessor( diff --git a/vllm/model_executor/models/nemotron_vl.py b/vllm/model_executor/models/nemotron_vl.py index b033437d6..a7e4e972e 100644 --- a/vllm/model_executor/models/nemotron_vl.py +++ b/vllm/model_executor/models/nemotron_vl.py @@ -402,6 +402,7 @@ class LlamaNemotronVLChatModel(nn.Module, SupportsMultiModal, SupportsPP, Suppor multimodal_config = vllm_config.model_config.multimodal_config self.config = config + self.model_config = vllm_config.model_config self.multimodal_config = multimodal_config self._patch_quant_config(config, quant_config) @@ -456,7 +457,10 @@ class LlamaNemotronVLChatModel(nn.Module, SupportsMultiModal, SupportsPP, Suppor *, prefix: str, ): - return AutoModel.from_config(config.vision_config, trust_remote_code=True) + return AutoModel.from_config( + config.vision_config, + trust_remote_code=self.model_config.trust_remote_code, + ) def _init_mlp1( self,