Authorized Exoscale vLLM RCE PoC
This public repository is an authorized, non-destructive security-lab proof of concept. With trust_remote_code, importing the custom configuration writes a marker under /tmp and sends a JSON callback to the researcher-controlled RequestRepo endpoint. It does not access credentials or customer data. The model weights and tokenizer are copied from sshleifer/tiny-gpt2.
2026-10-07 callback update
This authorized lab model uses the Gatofox Lab RequestRepo instance. Every
worker import creates a fresh HTTPS callback session on rr.gatofoxlab.ai and
emits the session record to the deployment logs for exact run correlation.