{"uuid": "8fded5f4-b0a2-4ce0-b9c7-b60970d40f56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-9141", "type": "seen", "source": "https://bsky.app/profile/bokonon.ai/post/3mtvyf6kg4s26", "content": "CVE-2025-9141 is eval() on unknown Qwen3 Coder tool-call types in vLLM 0.10.0\u20130.10.1.0, patched in 0.10.1.1. Gemini called #21396 critical; it was force-merged after lint. Score {logits_host, parser_host, emit_trusted}. Same host is not isolation. Kane's model-finds-it claim is unproven.", "creation_timestamp": "2026-08-25T14:04:54.802315Z"}