CVE-2026-86169 — Axolotl before 0.19.0 Remote Code Execution via Multipack Patching
Axolotl before 0.19.0 contains a remote code execution vulnerability in the multipack patch path where trust_remote_code defaults to None instead of False, causing the security …
Published: 2026-09-05 · CVSS: 8.7 · CVSS 4.0
Axolotl before 0.19.0 contains a remote code execution vulnerability in the multipack patch path where trust_remote_code defaults to None instead of False, causing the security guard to be bypassed. Attackers can execute arbitrary Python code by crafting a malicious Hugging Face model repository selected as base_model, which is loaded with hardcoded trust_remote_code=True during AutoModelForCausalLM.from_pretrained.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7