CYBERHAWK / CVE / CVE-2026-6859
CVE-2026-6859
InstructLab
HIGH
CVSS 8.8
ai
The flaw
Hardcoded trust_remote_code=True in training scripts enables arbitrary code execution from malicious HuggingFace models
What to do
Review model sources before running ilab train/download/generate