A flaw was found in InstructLab. The "linux_train.py" script hardcodes "trust_remote_code=True" when loading models from HuggingFace. This allows a remote attacker to achieve arbitrary Python code execution by convincing a user to run "ilab train/download/generate" with a specially crafted malicious model from the HuggingFace Hub. This vulnerability can lead to complete system compromise.