True to its name, AI-model-training tool Unsloth would do more work than it was asked to when developers checked out a model: It would also allow arbitrary code to execute on their machines. Pillar Security found that simply selecting a model in Unsloth Studio caused the application to download and execute Python code from the model repository.... Weiterlesen: Unsloth’s model picker had a code-execution problem
Intelligence View
⚡ tsecurity.de Intelligence
Unsloth’s model picker had a code-execution problem
True to its name, AI-model-training tool Unsloth would do more work than it was asked to when developers checked out a model: It would also allow arbitrary…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
12 Quellen
CVE-2026-16762 | Qt up to 4.2.x/6.8.8/6.11.1 QXmlStreamReader denial of service (EUVD-2026-108655)
11 weitere Quellen
VVulDB Updates3 uur geledenCVE-2026-25784 | Hallo Welt! BlueSpice up to 5.2.6 Token Authenticator LocalSettings.php mwsgTokenAuthenticatorServiceCIDR default permission (EUVD-2026-108653) VVulDB Updates3 uur geledenCVE-2026-25716 | Hallo Welt! BlueSpice up to 5.1.10/5.2.6 UserManager create unblockUser improper authorization (EUVD-2026-108651) VVulDB Updates2 uur geledenCVE-2026-91403 | Oracle Java SE/GraalVM for JDK/GraalVM Enterprise Edition JSSE privileges management (EUVD-2026-107578) VVulDB Updates2 uur geledenCVE-2026-114406 | Red Hat Satellite 6 ca-certificates certificate validation (EUVD-2026-107565) VVulDB Updates2 uur geledenCVE-2026-105963 | elixir-plug plug/plug_crypto Plug.Crypto.verify/Plug.Crypto.secure_compare information disclosure (EUVD-2026-108666) VVulDB Updates2 uur geledenCVE-2026-89320 | Eclipse KeyPont HmacShaCryptor.Hash data authenticity (EUVD-2026-108654)
+5
8 Quellen
CVE-2025-30051 | CGM CLININET up to 2026.MS2 Configuration File SysIO.pl permission (EUVD-2025-211181)
7 weitere Quellen
VVulDB Updates3 uur geledenCVE-2025-30049 | CGM CLININET up to 2026.MS3 weak password hash (EUVD-2025-211179) VVulDB Updates3 uur geledenCVE-2025-30047 | CGM CLININET up to 2026.MS2 deserialization (EUVD-2025-211178) VVulDB Updates3 uur geledenCVE-2025-30050 | CGM CLININET up to 2026.MS2 RunCGI RunCGI.pm os command injection (EUVD-2025-211180) VVulDB Updates3 uur geledenCVE-2025-30045 | CGM CLININET up to 2026.MS3 ConvExpr code injection (EUVD-2025-211176) VVulDB Updates3 uur geledenCVE-2025-30046 | CGM CLININET up to 2026.MS3 HL7 Communication privileges management (EUVD-2025-211177) VVulDB Updates3 uur geledenCVE-2025-30043 | CGM CLININET up to 2026.MS2 missing authentication (EUVD-2025-211175)
+1
8 Quellen
How to watch The Northumbria Mysteries for free, online and from anywhere
7 weitere Quellen
LLatest from TechRadar3 uur geledenHow to watch Chaar Yaar online – stream the Hindi crime series from anywhere for free LLatest from TechRadar3 uur geledenHow to watch Kon Yashwant Pansare online from anywhere LLatest from TechRadar2 uur geledenHow to watch Aryabhatt Ka Zero online from anywhere LLatest from TechRadar2 uur geledenHow to watch Kinare Kinare online from anywhere LLatest from TechRadar2 uur geledenHow to watch Maa Inti Bangaaram online from anywhere LLatest from TechRadar2 uur geledenHow to watch Mercury Music Prize for free – stream full replay
+1
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/nl/4219088/sichere-programmierung/unsloths-model-picker-had-a-code-execution-problem/