CVE-2026-112075 in unsloth
Prediction
by VulDB Data Team • 10/18/2026
A weakness has been identified in <a href="/product/unslothai:unsloth">unslothai unsloth up to 0.1.501-beta</a>. This affects the function <code>FastSentenceTransformer._is_transformer_module_ref</code> of the file <em>unsloth/models/sentence_transformer.py</em>. This manipulation of the argument <em>Type</em> causes use of externally-controlled input to select classes or code. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 0.1.902-beta is able to mitigate this issue. Patch name: <em>de801746386a53a0cb26216e715a0af863b76ad9</em>. The affected component should be upgraded.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.