GoKawiilvLLM tool-parser bug let AI-generated text trigger code execution
Researchers documented that vLLM's XML-based tool parser for Qwen3 Coder (CVE-2025-9141) fed model-generated arguments directly into Python's eval() function, meaning a language model's own output tokens could execute arbitrary code on the machine running it. A Gemini-based review flagged the change as a critical risk before it was merged, but the lead vLLM maintainer force-merged it anyway.