CVE-2026-22778 vLLM libopenjp2 AVBuffer Function Pointer Hijack - Shell Spawn

Tim Peck@timpeck

•updated Jun 18, 2026•0•0•56

Detects post-exploitation of CVE-2026-22778 (vLLM libopenjp2 JPEG2000 cdef heap overflow). The overwritten AVBuffer free() pointer is set to system(), so a successful exploit spawns /bin/sh -c as a direct child of the vLLM/python inference process. Matches a shell or download/exec utility launched with a vLLM/python/uvicorn parent, excluding benign python worker children.