CVE-2026-86169
Axolotl before 0.19.0 contains a remote code execution vulnerability in the multipack patch path where trust_remote_code defaults to None instead of False, causing the security guard to be bypassed. Attackers can execute arbitrary Python code by crafting a malicious Hugging Face model repository selected as base_model, which is loaded with hardcoded trust_remote_code=True during AutoModelForCausalLM.from_pretrained.
- Published Sep 5, 2026
- CVSS 8.7 high
- 0.9% chance of exploitation in the next 30 days (EPSS)
- A fix is available