PT-2026-34336 · Unknown · Instructlab

Osidb Bzimport · Published 2026-04-22 · Updated 2026-04-22 · CVE-2026-6859

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions InstructLab (affected versions not specified)

Description A flaw exists in the linux train.py script which hardcodes the trust remote code variable as True when loading models from HuggingFace. This allows a remote attacker to achieve arbitrary Python code execution if a user is convinced to run the ilab train/download/generate command using a specially crafted malicious model from the HuggingFace Hub, potentially leading to complete system compromise.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-829

Related Identifiers

CVE-2026-6859

GHSA-RXPQ-XGQX-FR7P

Affected Products

Instructlab

References · 8

• https://access.redhat.com/security/cve/CVE-2026-6859 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2459998 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-6859 · Security Note
• https://osv.dev/vulnerability/GHSA-rxpq-xgqx-fr7p · Vendor Advisory
• https://github.com/instructlab/instructlab · Note
• https://twitter.com/vuldb/status/2046952955786698767 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2046968668936900797 · Twitter Post
• https://twitter.com/CVEnew/status/2047012146484219941 · Twitter Post