CVE-2026-112075
Received Received - Intake

Use of Externally-Controlled Input in UnslothAI Unsloth

Publication date: 2026-10-19

Last updated on: 2026-10-19

Assigner: VulDB

Description
A weakness has been identified in unslothai unsloth up to 0.1.501-beta. This affects the function FastSentenceTransformer._is_transformer_module_ref of the file unsloth/models/sentence_transformer.py. This manipulation of the argument Type causes use of externally-controlled input to select classes or code. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 0.1.902-beta is able to mitigate this issue. Patch name: de801746386a53a0cb26216e715a0af863b76ad9. The affected component should be upgraded.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-19
Last Modified
2026-10-19
Generated
2026-10-19
AI Q&A
2026-10-19
EPSS Evaluated
N/A
NVD
CVE-2026-112075
EUVD
EUVD-2026-104057

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
unslothai unsloth 0.1.501-beta

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-470 The product uses external input with reflection to select which classes or code to use, but it does not sufficiently prevent the input from selecting improper classes or code.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability exists in Unsloth up to version 0.1.501-beta. It involves the FastSentenceTransformer._is_transformer_module_ref function in unsloth/models/sentence_transformer.py. An attacker can manipulate the 'Type' argument to execute arbitrary Python code by bypassing the trust gate in sentence-transformers. This allows code execution with the privileges of the Unsloth process.

Detection Guidance

To detect this vulnerability, check if your Unsloth version is below 0.1.902-beta. Inspect the modules.json file in any sentence-transformers-style directory for manipulated 'type' fields. Look for unexpected imports or code execution during model loading.

Impact Analysis

An attacker could remotely execute malicious code on your system by manipulating the 'Type' field in a model's modules.json file. This could lead to unauthorized access, data theft, or system compromise. The exploit is publicly available and affects any use of FastSentenceTransformer.from_pretrained.

Compliance Impact

This vulnerability could lead to unauthorized data access or exfiltration, violating GDPR's data protection principles and HIPAA's security requirements. Organizations using affected Unsloth versions may face compliance violations if exploited.

Mitigation Strategies

Upgrade Unsloth to version 0.1.902-beta or later immediately. Remove any untrusted models or directories. Avoid using FastSentenceTransformer.from_pretrained with untrusted sources until patched.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-112075. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart