Security1 hOctober 28, 2026, 18:53

Unsloth model loader flaw allows code execution despite trust setting

Pillar Security disclosed CVE-2026-93348, a CVSS 8.6 vulnerability in Unsloth's model loader that lets a malicious model configuration execute arbitrary Python code even with trust_remote_code=False. Unsloth Zoo versions 2025.9.9 to before 2026.8.14 and Unsloth 2025.9.9 to before 2026.8.20 are affected; fixes are in 2026.8.14 and 2026.8.20.

CSO Online

Open source

Unsloth model loader flaw allows code execution despite trust setting

CVE-2026-93348 carries a CVSS score of 8.6
Code runs before model weights or tokenizers load
Unsloth Zoo before 2026.8.14 and Unsloth before 2026.8.20 affected
Hugging Face tokens and cloud credentials at risk

#Unsloth#HuggingFace

48,975 Hugging Face models claim apache-2.0 despite restricted ancestors

Security

npm Trusted Publishing Abused to Ship GHAPPIER Loader

Unsloth Studio adds four security gates before running AI models

Security

Unsloth model loader flaw allows code execution despite trust setting

48,975 Hugging Face models claim apache-2.0 despite restricted ancestors

npm Trusted Publishing Abused to Ship GHAPPIER Loader

Unsloth Studio adds four security gates before running AI models

hydra-core PyYAML blocklist bypass allows arbitrary code execution