CVE-2026-46517

Reframing 2026-05-02: implicit unsafe remote-code path, not "supply-chain" The accurate description of this vulnerability is: ""getmodelarch" and related helpers hardcode "trustremotecode=True" with no opt-out, creating an implicit unsafe remote-code load path on every model fetch." What this...