CVE-2026-6859: Red Hat Enterprise Linux Ai
High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days.
A flaw was found in InstructLab. The `linux_train.py` script hardcodes `trust_remote_code=True` when loading models from HuggingFace. This allows a remote attacker to achieve arbitrary Python code execution by convincing a user to run `ilab train/download/generate` with a specially crafted malicious model from the HuggingFace Hub. This vulnerability can lead to complete system compromise.
Affected products
Published 2026-04-22. Last modified 2026-07-15.