A patched Unsloth Studio vulnerability allows malicious AI models to execute arbitrary Python code during inspection, via the trust_remote_code setting.
Unsloth Studio Flaw Turns Routine Model Inspection Into Code Execution
Résumé + lien vers la source. Sans paywall, sans tracking.