{"data":{"id":"a259c6ec-c688-4165-87c3-b04bb1a38036","title":"Unsloth’s model picker had a code-execution problem","summary":"Pillar Security found that selecting a model in Unsloth Studio made the application download and execute Python code from the model repository, with no weights loaded or inference run. The code ran with the user's permissions, which could expose training data, Hugging Face tokens, SSH keys and cloud credentials. Unsloth's maintainers declined to issue an advisory or CVE, citing Studio's beta status, and fixed the issue in June.","solution":"In version 2026.6.9, Studio no longer enables arbitrary model loading directly from Hugging Face and no longer trusts remote code from local model files. Pillar urges users to upgrade to the fixed version, even if they only use Unsloth core, and to audit LLM workflows for unnecessary occurrences of trust_remote_code=True.","labels":["security","industry"],"sourceUrl":"https://www.csoonline.com/article/4228910/unsloths-model-picker-had-a-code-execution-problem-2.html","publishedAt":"2026-09-30T13:56:13.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["supply_chain"],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedVendors":["HuggingFace"],"affectedVendorsRaw":["Unsloth","Unsloth Studio","Hugging Face","Transformers","IBM Granite Speech and Vision","DeepSeek-OCR","ChatGLM","Qwen"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-09-30T13:56:13.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null}}