Trusting Unsloth’s trust setting could mean executing malicious code

AI developers may have a security setting enabled and still end up running attacker-controlled code. Pillar Security has disclosed a high-severity vulnerability in Unsloth’s model loader that could allow arbitrary Python code execution when processing a maliciously crafted model configuration. Tracked as CVE-2026-93348 , the vulnerability carries a CVSS score of 8.6.