axolotl-ai-cloud CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH axolotl-ai-cloud CVE published 2026-09-05

CVE-2026-86169

CVE-2026-86169 is a remote code execution vulnerability in Axolotl before version 0.19.0. The vulnerability exists in the multipack patch path where the trust_remote_code setting defaults to None instead of False, allowing attackers to bypass security guards and execute arbitrary Python code by crafting a malicious Hugging Face model repository. This vulnerability can be mitigated by restricting access to [truncated]