Trusting Unsloth’s trust setting could mean executing malicious code

AI developers may have a security setting enabled and still end up running attacker-controlled code. Pillar Security has disclosed a high-severity vulnerability in Unsloth’s model loader that could allow arbitrary Python code execution when processing a maliciously crafted model configuration. Tracked as CVE-2026-93348, the vulnerability carries a... Weiterlesen: Trusting Unsloth’s trust setting could mean executing malicious code