Skip to content

CVE-2026-86169

CVE

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
September 5, 2026
Last Seen
September 6, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

A remote code execution vulnerability identified as CVE-2026-86169 affects Axolotl versions up to 0.18.0. The flaw arises from the multipack patch path where the trust_remote_code setting defaults to None instead of False, allowing attackers to bypass security measures. By crafting a malicious Huggi...

Public Exploits

Checking GitHub for proof-of-concept code…