CVE-2026-86169 Axolotl before 0.19.0 Remote Code Execution via Multipack Patching

Axolotl before 0.19.0 contains a remote code execution vulnerability in the multipack patch path where trustremotecode defaults to None instead of False, causing the security guard to be bypassed. Attackers can execute arbitrary Python code by crafting a malicious Hugging Face model repository...

CVE-2026-86169

Axolotl (through 0.18.0 ), a Python-based LLM fine-tuning framework, contains a remote code execution vulnerability in its multipack patch code path. The root cause is that the trust_remote_code parameter defaults to None instead of False, effectively bypassing the security guard. An attacker who...

CVE-2026-86169 Axolotl before 0.19.0 Remote Code Execution via Multipack Patching

Axolotl before 0.19.0 contains a remote code execution vulnerability in the multipack patch path where trustremotecode defaults to None instead of False, causing the security guard to be bypassed. Attackers can execute arbitrary Python code by crafting a malicious Hugging Face model repository...

CVE-2026-86169 Axolotl before 0.19.0 Remote Code Execution via Multipack Patching

Axolotl before 0.19.0 contains a remote code execution vulnerability in the multipack patch path where trustremotecode defaults to None instead of False, causing the security guard to be bypassed. Attackers can execute arbitrary Python code by crafting a malicious Hugging Face model repository...

ROOT-OS-UBUNTU-2404-CVE-2026-23159 CVE-2026-23159 in linux - Patched by Root

Root has patched CVE-2026-23159 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2025-21926 CVE-2025-21926 in linux - Patched by Root

Root has patched CVE-2025-21926 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2026-43073 CVE-2026-43073 in linux - Patched by Root

Root has patched CVE-2026-43073 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2026-43062 CVE-2026-43062 in linux - Patched by Root

Root has patched CVE-2026-43062 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2025-40172 CVE-2025-40172 in linux - Patched by Root

Root has patched CVE-2025-40172 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2026-43311 CVE-2026-43311 in linux - Patched by Root

Root has patched CVE-2026-43311 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2025-21811 CVE-2025-21811 in linux - Patched by Root

Root has patched CVE-2025-21811 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2025-22019 CVE-2025-22019 in linux - Patched by Root

Root has patched CVE-2025-22019 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2024-49888 CVE-2024-49888 in linux - Patched by Root

Root has patched CVE-2024-49888 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2026-45893 CVE-2026-45893 in linux - Patched by Root

Root has patched CVE-2026-45893 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2025-22040 CVE-2025-22040 in linux - Patched by Root

Root has patched CVE-2025-22040 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2025-40342 CVE-2025-40342 in linux - Patched by Root

Root has patched CVE-2025-40342 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2026-23176 CVE-2026-23176 in linux - Patched by Root

Root has patched CVE-2026-23176 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2026-43340 CVE-2026-43340 in linux - Patched by Root

Root has patched CVE-2026-43340 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2025-37857 CVE-2025-37857 in linux - Patched by Root

Root has patched CVE-2025-37857 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

PT-2026-86418

grav-plugin-api before 1.0.20 fails to validate group-inherited super permissions in user-management guards, allowing non-super user managers to modify super-admin accounts. Attackers with api.access and api.users.write can patch password fields on group-super accounts to gain full administrative...