CyberRota Analysis
AI-GeneratedA remote code execution vulnerability exists in Axolotl versions up to 0.18.0, allowing attackers to bypass security measures and execute arbitrary Python code by manipulating the base_model parameter in a malicious Hugging Face model repository. This flaw arises from the incorrect default setting of trust_remote_code, which defaults to None instead of False. Organizations using Axolotl for model deployment should prioritize patching this vulnerability to mitigate potential exploitation risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Axolotl before 0.19.0 contains a remote code execution vulnerability in the multipack patch path where trust_remote_code defaults to None instead of False, causing the security guard to be bypassed. Attackers can execute arbitrary Python code by crafting a malicious Hugging Face model repository selected as base_model, which is loaded with hardcoded trust_remote_code=True during AutoModelForCausalLM.from_pretrained.