CVE-2026-86169 - OSV

Osv.Dev • September 6, 2026

8.7 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVSS Calculator

Axolotl through 0.18.0 contains a remote code execution vulnerability in the multipack patch path where trust remote code defaults to None instead of False, causing the security guard to be bypassed. Attackers can execute arbitrary Python code by crafting a malicious Hugging Face model repository selected as base model, which is loaded with hardcoded trust remote code=True during AutoModelForCausalLM.from pretrained.

Git / github.com/axolotl-ai-cloud/axolotl

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Remote Code Execution Vulnerability in Axolotl Affects Multiple Users A remote code execution vulnerability identified as CVE-2026-86169 affects Axolotl versions up to 0.18.0. The flaw arises from the multipack patch path where the trust_remote_code setting defaults to None instead of False, allowing attackers to bypass security measures. By crafting a malicious Hugging Face model repository, attackers can execute arbitrary Python code during the loading process. This vulnerability has a CVSS score of 8.7, indicating a high severity level. Users of Axolotl are urged to apply patches immediately to mitigate risks. The vulnerability was published on September 5, 2026, and is currently not known to be actively exploited. The issue has been addressed in a patch available on GitHub. 2 sources 46

Extracted Entities

CVE-2026-86169 - OSV

The full story

Extracted Entities

CVEs (1)

CWE Weaknesses (1)

MITRE ATT&CK (1)

Platforms (1)

Tools (1)