What’s Vulnerable › Products

RedHat Instructlab vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your RedHat Instructlab version is affected

Latest RedHat Instructlab vulnerabilities

• CVE-2026-6859 — Instructlab: instructlab: arbitrary code execution due to hardcoded `trust_remote_code=true` (CVSS 8.8)
• CVE-2026-6855 — Instructlab: instructlab: path traversal allows arbitrary directory creation and file write (CVSS 7.1)