CVE-2026-6859

A flaw was found in InstructLab. The `linux_train.py` script hardcodes `trust_remote_code=True` when loading models from HuggingFace. This allows a remote attacker to achieve arbitrary Python code execution by convincing a user to run `ilab train/download/generate` with a specially crafted malicious model from the HuggingFace Hub. This vulnerability can lead to complete system compromise.

CVSS 3.1

8.8CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.4% chance of exploitation in the next 30 days; higher than 38% of CVEs (scores of 2026-10-26)

CWE

CWE-829

Published

2026-04-22

Modified

2026-10-26

Record from

the NVD, synced 2026-10-26

Affected

• redhat:enterprise_linux_ai
• redhat:instructlab

Packages (OSV)

References

• https://access.redhat.com/security/cve/CVE-2026-6859
• https://bugzilla.redhat.com/show_bug.cgi?id=2459998
• https://access.redhat.com/security/cve/CVE-2026-6859
• https://bugzilla.redhat.com/show_bug.cgi?id=2459998
• https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6859.json

Check your stackJSON