CVE-2026-112075 | unslothai unsloth up to 0.1.501-beta sentence_transformer.py type externally-controlled input to select classes or code (Issue 12419)

October 18, 2026 Yanac

A vulnerability has been found in unslothai unsloth up to 0.1.501-beta and classified as critical. This affects the function FastSentenceTransformer._is_transformer_module_ref of the file unsloth/models/sentence_transformer.py. This manipulation of the argument Type causes use of externally-controlled input to select classes or code.

This vulnerability appears as CVE-2026-112075. The attack may be initiated remotely. In addition, an exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More