CVE-2026-86169

    Dashboard / Vulnerabilities / CVE-2026-86169

    CVE-2026-86169

    Published: 5 Sept 2026Last Modified: 25 Sept 2026

    Summary: Axolotl before 0.19.0 Remote Code Execution via Multipack Patching

    Details: Axolotl before 0.19.0 contains a remote code execution vulnerability in the multipack patch path where trust_remote_code defaults to None instead of False, causing the security guard to be bypassed. Attackers can execute arbitrary Python code by crafting a malicious Hugging Face model repository selected as base_model, which is loaded with hardcoded trust_remote_code=True during AutoModelForCausalLM.from_pretrained.

    References: https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/86xxx/CVE-2026-86169.json, https://github.com/axolotl-ai-cloud/axolotl/releases/tag/v0.19.0, https://nvd.nist.gov/vuln/detail/CVE-2026-86169, https://www.vulncheck.com/advisories/axolotl-through-0.18.0-remote-code-execution-via-multipack-patching, https://github.com/axolotl-ai-cloud/axolotl/commit/b62d60b101eea7f32532ee3c0b17c2f2430a9262, https://github.com/axolotl-ai-cloud/axolotl/pull/3858, https://github.com/axolotl-ai-cloud/axolotl, https://github.com/axolotl-ai-cloud/axolotl/blob/v0.18.0/src/axolotl/loaders/patch_manager.py#L794-L806, https://github.com/axolotl-ai-cloud/axolotl/blob/v0.18.0/src/axolotl/monkeypatch/multipack.py#L86-L96

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -f6a10839809cc20ad719dbe1f6f3513b29c88e3b

    Affected versions

    v0.18.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2026-86169 | CVE-DB