CVE-2026-5817 | Docker Desktop up to 4.67.x vllm-metal Inference Backend transformers.AutoTokenizer.from_pretrained inclusion of functionality from untrusted control sphere (Nessus ID 316464)

A vulnerability classified as . The impacted element is the function transformers.AutoTokenizer.from_pretrained of the component vllm-metal Inference Backend. The manipulation leads to inclusion of functionality from untrusted control sphere.

This vulnerability is listed as CVE-2026-5817. The attack must be carried out locally. There is no available exploit.

It is recommended to upgrade the affected component.