[Security] Respect user trust_remote_code setting in NemotronVL and KimiK25 (vllm-project#36192)

Signed-off-by: Russell Bryant <rbryant@redhat.com>

Author: russellb

vllm/model_executor/models/kimi_k25.py

@@ -174,7 +174,8 @@ def __init__(self, ctx: InputProcessingContext) -> None:
         self.hf_config = self.get_hf_config()
         self.media_token_id = self.hf_config.media_placeholder_token_id
         media_processor = cached_get_image_processor(
-            self.ctx.model_config.model, trust_remote_code=True
+            self.ctx.model_config.model,
+            trust_remote_code=self.ctx.model_config.trust_remote_code,
         )
         self.media_processor = media_processor
         self.hf_processor = MoonshotKimiVAutoProcessor(

vllm/model_executor/models/nemotron_vl.py

@@ -402,6 +402,7 @@ def __init__(self, *, vllm_config: VllmConfig, prefix: str = "") -> None:
         multimodal_config = vllm_config.model_config.multimodal_config
 
         self.config = config
+        self.model_config = vllm_config.model_config
         self.multimodal_config = multimodal_config
         self._patch_quant_config(config, quant_config)
 
@@ -456,7 +457,10 @@ def _init_vision_model(
         *,
         prefix: str,
     ):
-        return AutoModel.from_config(config.vision_config, trust_remote_code=True)
+        return AutoModel.from_config(
+            config.vision_config,
+            trust_remote_code=self.model_config.trust_remote_code,
+        )
 
     def _init_mlp1(
         self,