CVE-2026-93348 Details

A code injection vulnerability has been identified in Unsloth Zoo versions 2025.9.9 prior to 2026.8.14. This vulnerability arises in the model-loading compile path, where the function get_transformers_model_type() in hf_utils.py retrieves model_type values from nested model configurations without applying a character allowlist. This oversight allows newlines and arbitrary Python code to bypass normalization. Attackers can exploit this by inserting a newline into a nested model_type value within a malicious model's config.json, effectively terminating the import statement and executing arbitrary Python code via exec() in the function unsloth_compile_transformers(). This exploitation leads to remote code execution as the user loading the model, particularly during training or inference.

Users can upgrade to Unsloth Zoo versions 2026.8.15 or later to address this vulnerability.