Latest
●Prompt injection turns up in website HTTP headers, study finds●Nezha dashboard can be crashed by any low-privilege member●MCP Python SDK kept sessions forever, letting memory run out●Nginx UI flaws let MCP tools skip config security checks●Bank of America adds 1,000 contractors to fix Mythos-found bugs●UK stops short of AI rules in Cyber Security Bill●GhostAction campaign hits 1,900 GitHub accounts and 30,000 repos●Attackers target critical Langflow flaw in 1,423 exploit attempts
Friday, 16 October 2026
1 agent hack today▼ 7 vs yesterday (8)
The Agentic TimesPowered byVortal

Incident database

Unsloth Studio Flaw Enabled Code Execution via Model Inspection

A vulnerability in Unsloth Studio allowed malicious AI models to execute arbitrary Python code during routine model inspection, exploiting the trust_remote_code setting. The issue has since been patched.

Disclosed 29 September 2026 · Record updated 1 October 2026

Impact

Malicious AI models could trigger arbitrary Python code execution when inspected via Unsloth Studio's trust_remote_code setting, potentially compromising the inspecting system.

Our coverage

Sources

  1. darkreading.comhttps://darkreading.com/application-security/unsloth-studio-flaw-model-inspection-code-execution