CVE-2026-86169

Name of the Vulnerable Software and Affected Versions Axolotl versions prior to 0.18.1

Description A remote code execution issue exists in the multipack patch path. The security guard is bypassed because the trust remote code variable defaults to None instead of False. An attacker can execute arbitrary Python code by providing a malicious Hugging Face model repository as the base model, which is then loaded with trust remote code=True during the AutoModelForCausalLM.from pretrained() function call.

Recommendations Update Axolotl to version 0.18.1 or later.