CVE-2026-58474: whichllm before 0.5.16 contains a code injection vulnerability in the run and snippet commands that allows a remote atta

whichllm (a tool for working with LLMs) versions before 0.5.16 have a code injection vulnerability in the run and snippet commands that lets a remote attacker execute arbitrary code (running commands they choose on your computer). The vulnerability exists because the tool takes filenames from HuggingFace (a model repository) and puts them directly into Python code without checking them first, so a specially crafted filename with special characters can break out and run malicious code before the model is even downloaded.