{"data":{"id":"51bef7fe-66a6-49b3-a932-f30ae8ad87f6","title":"CVE-2026-6859: A flaw was found in InstructLab. The `linux_train.py` script hardcodes `trust_remote_code=True` when loading models…","summary":"CVE-2026-6859 affects InstructLab. The `linux_train.py` script hardcodes `trust_remote_code=True` when loading models from HuggingFace, so a remote attacker can achieve arbitrary Python code execution by persuading a user to run `ilab train/download/generate` with a crafted malicious model from the HuggingFace Hub. The weakness is classified as CWE-829, and NVD had not yet provided an assessment at publication.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-6859","publishedAt":"2026-04-22T14:17:07.687Z","cveId":"CVE-2026-6859","cweIds":["CWE-829"],"cvssScore":"8.8","cvssSeverity":"high","severity":"high","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":["instructlab@<= 0.26.1"],"affectedPackageNames":["instructlab"],"affectedPackageRefs":["pypi:instructlab"],"affectedVendors":["HuggingFace"],"affectedVendorsRaw":["InstructLab","HuggingFace Hub"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"InstructLab code execution via untrusted HuggingFace model loading","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"required","exploitMaturity":"unknown","epssScore":0.00441,"epssCheckedAt":"2026-11-09T12:10:45.895Z","kevDateAdded":null,"advisoryAliases":["GHSA-rxpq-xgqx-fr7p"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:49:21.552Z","patchAvailable":null,"disclosureDate":"2026-04-22T14:17:07.687Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-437"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"training_data","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":["AML.T0010"],"fixes":[]}}