← Back to the live CVE advisory feed

CVE-2026-93348: Product identification pending

Severity

8.6 (HIGH)

Vendor

UNSLOTH ZOO

Affected versions

Before 2026.8.14

Fixed version

2026.8.14

Patch status

Patched

Published

2026-09-28T16:17:17.643

Modified

2026-09-28T16:17:17.643

Why it matters

This matters because the affected product may allow code execution. Prioritize systems that are internet-facing or have privileged access to other infrastructure.

Recommended admin actions

• Review and patch based on exposure, asset criticality, and business impact.
• Compare installed versions against the affected version range in the advisory.
• Treat internet-facing systems as higher priority.
• Review logs for suspicious activity related to the affected application or component.

Technical summary

Unsloth Zoo versions 2025.9.9 before 2026.8.14, as implemented in Unsloth 2025.9.9 through 2026.8.19, contains a code injection vulnerability in the model-loading compile path where the get_transformers_model_type() function in hf_utils.py collects model_type values from nested model configurations without enforcing a character allowlist, allowing newlines and arbitrary Python source to survive normalization. Attackers can embed a newline in a nested model_type value within a malicious model's config.json to terminate the generated import statement and execute arbitrary Python code via exec() in unsloth_compile_transformers(), achieving remote code execution as the loading user when the model is loaded for training or inference.

View the official NVD record for CVE-2026-93348

CVE data is sourced from NVD/CNA records and optional enrichment. Validate against the vendor advisory before taking production action.