CVE-2026-86169: Axolotl-Ai-Cloud Axolotl

High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days.

Axolotl before 0.19.0 contains a remote code execution vulnerability in the multipack patch path where trust_remote_code defaults to None instead of False, causing the security guard to be bypassed. Attackers can execute arbitrary Python code by crafting a malicious Hugging Face model repository selected as base_model, which is loaded with hardcoded trust_remote_code=True during AutoModelForCausalLM.from_pretrained.

Affected products

• Axolotl-Ai-Cloud Axolotl: before 0.19.0 (fixed in 0.19.0)

Published 2026-09-05. Last modified 2026-09-23.