CVE-2026-112075 Details
Description
A weakness has been identified in unslothai unsloth up to 0.1.501-beta. This affects the function FastSentenceTransformer._is_transformer_module_ref of the file unsloth/models/sentence_transformer.py. This manipulation of the argument Type causes use of externally-controlled input to select classes or code. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 0.1.902-beta is able to mitigate this issue. Patch name: de801746386a53a0cb26216e715a0af863b76ad9. The affected component should be upgraded.
A remote code execution vulnerability exists in UnslothAI Unsloth versions prior to 0.1.902-beta. The issue arises in the FastSentenceTransformer model handling, specifically within the modules.json file of locally stored sentence-transformers-style models. The vulnerability allows for the execution of arbitrary code by importing attacker-controlled modules, bypassing the trust mechanisms intended to prevent such actions. This exploitation can be initiated remotely, particularly through the Unsloth desktop application or via the command line interface.
Users can upgrade to Unsloth version 0.1.902-beta or later to address this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 19, 2026CISA-ADP
Assessed Oct 19, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/unslothai/unsloth/ | [email protected] | Vendor |
| https://github.com/unslothai/unsloth/commit/de801746386a53a0cb26216e715a0af863b76ad9 | [email protected] | Source CodeVendor |
| https://github.com/unslothai/unsloth/issues/12419 | [email protected] | ExploitIssue TrackingTechnical DescriptionVendor |
| https://github.com/unslothai/unsloth/pull/11560 | [email protected] | Issue TrackingVendor |
| https://github.com/unslothai/unsloth/releases/tag/v0.1.902-beta | [email protected] | Release NotesVendor |
| https://github.com/user-attachments/files/32908312/poc.zip | [email protected] | Broken LinkExploit |
| https://vuldb.com/cve/CVE-2026-112075 | [email protected] | AdvisoryPermission Required |
| https://vuldb.com/submit/1009576 | [email protected] | Issue TrackingPermission Required |
| https://vuldb.com/vuln/421754 | [email protected] | AdvisoryPermission Required |
| https://vuldb.com/vuln/421754/cti | [email protected] | AdvisoryPermission Required |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-470 | Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| unslothai unsloth | <= 0.1.501-beta (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 19, 2026 | CVE Modified | CISA-ADP |
| Oct 19, 2026 | New CVE Received | [email protected] |