CVE-2026-93348

Name of the Vulnerable Software and Affected Versions Unsloth Zoo versions 2025.9.9 through 2026.8.13 Unsloth versions 2025.9.9 through 2026.8.19

Description A code injection issue exists in the model-loading compile path. The get transformers model type() function in hf utils.py collects model type values from nested model configurations without enforcing a character allowlist, which allows newlines and arbitrary Python source to survive normalization. An attacker can embed a newline in a nested model type value within a malicious model's config.json to terminate the generated import statement and execute arbitrary Python code via exec() in unsloth compile transformers(). This leads to remote code execution as the loading user during model loading for training or inference.

Recommendations Update Unsloth Zoo to version 2026.8.14 or later. Update Unsloth to a version later than 2026.8.19.