Description
A flaw was found in InstructLab. The `linux_train.py` script hardcodes `trust_remote_code=True` when loading models from HuggingFace. This allows a remote attacker to achieve arbitrary Python code execution by convincing a user to run `ilab train/download/generate` with a specially crafted malicious model from the HuggingFace Hub. This vulnerability can lead to complete system compromise.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3
Default version status: affected
Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3
Default version status: affected
Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3
Default version status: unaffected
Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3
Default version status: affected
Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3
Default version status: affected
Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3
Default version status: unaffected