Tag: Unsloth

Turning off remote code trust does not save Unsloth users

A model-type string reaches exec() in a flaw rated 8.6, so a trusted-looking config can run attacker code.