Tools AI Risk Radar ai-incident-0263
Incident record
Unsloth patches code execution through model configuration
- Severity
- High
- Status
- Patched
- Type
- Infra Vuln
- Target
- Affected Unsloth and Unsloth Zoo model loaders
- Actor
- Researcher disclosure
- CVE
- CVE-2026-93348
What happened
A malicious model configuration could cause Python code to run while an affected Unsloth loader prepares a model. Disabling the separate remote-code option does not protect this loading path.
The CNA dates public disclosure to 23 August; the CVE was published on 28 September and Pillar’s technical analysis on 27 October. Affected versions are Unsloth Zoo from 2025.9.9 up to 2026.8.14, and Unsloth from 2025.9.9 up to 2026.8.20, excluding the upper endpoints. The fixes address nested configuration values and generated source. This is a patched loading weakness, with no monetary-loss claim.
Sources
- Canonical CVE recordraw.githubusercontent.com/CVEProject/cvelistV5/main/cves/202…
- Pillar original technical analysiswww.pillar.security/blog/trust-disabled-code-executed-arbitr…
One record from the AI Risk Radar, maintained by the Security Desk.Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 28 October 2026