Essay: LLMs could exploit inference engines to control host machines

Essay explores how a malicious LLM could take control of its host machine by emitting tokens that exploit vulnerabilities in inference engines like vLLM or SGLang. Cites CVE-2025-9141, an arbitrary-code execution bug in vLLM's XML-based tool parser for Qwen3 Coder, which passed tool-call arguments to eval().