Skip to content
Vulnerability in Unsloth Allows Arbitrary Code Execution

Vulnerability in Unsloth Allows Arbitrary Code Execution

First seen 28 Oct 2026, 12:09 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 28, 2026 at 13:09 UTC
  • •CVE-2026-93348 allows arbitrary code execution in Unsloth's model loader.
  • •Affected versions include Unsloth Zoo 2025.9.9 to before 2026.8.14.
  • •Immediate updates to Unsloth Zoo 2026.8.14 or later are required to mitigate the vulnerability.

Pillar Security disclosed a high-severity vulnerability in Unsloth’s model loader, tracked as CVE-2026-93348, which allows arbitrary Python code execution via a maliciously crafted model configuration. The vulnerability, rated with a CVSS score of 8.6, affects Unsloth Zoo versions from 2025.9.9 to before 2026.8.14 and Unsloth versions from 2025.9.9 to before 2026.8.20. Attackers can exploit this flaw by injecting additional Python statements into an import statement generated from insufficiently validated model-type values. This could lead to unauthorized access to proprietary datasets, model artifacts, Hugging Face tokens, and cloud credentials. The initial fix was implemented approximately six hours after the private report on August 22, but the maintainers did not respond to follow-up disclosures. Security teams are advised to update to the latest versions to mitigate the risk.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-08-22
Private report submitted
Pillar Security reported the vulnerability to Unsloth maintainers, but received no response.
Pillar Security
2026-09-28
CVE-2026-93348 published
The vulnerability was officially tracked and assigned a CVSS score of 8.6.
Csoonline
2026-10-28
Public disclosure of vulnerability
Pillar Security publicly disclosed the vulnerability, detailing its implications and affected versions.
Pillar Security

More articles in this cluster (3)

Following this threat?

Track CVE-2026-93348 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (6)

1 / 4

Common questions

Which versions of Unsloth are affected?
Unsloth Zoo versions from 2025.9.9 to before 2026.8.14 and Unsloth versions from 2025.9.9 to before 2026.8.20 are affected.
What should I do to protect my systems?
Update to Unsloth Zoo 2026.8.14 or later and Unsloth 2026.8.20 or later to mitigate the vulnerability.
Is there any evidence of exploitation in the wild?
No evidence of active exploitation has been reported at this time.