CVE-2026-46432: Cli Serve Py Cwe 000 Cve 2026 46432

The --trust-remote-code CLI argument was manually defined via argparse without the correct internal project wiring. This causes downstream model-loading components to miss the flag's value and inherently default back to `trust_remote_code=True`, presenting a security risk during remote code execution operations. Remove the manual argparse definition and prop

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0Python
greprules fetch cve-2026-46432-cli-serve-py-cwe-000-cve-2026-46432 --engine opengrep

Description

The --trust-remote-code CLI argument was manually defined via argparse without the correct internal project wiring. This causes downstream model-loading components to miss the flag's value and inherently default back to `trust_remote_code=True`, presenting a security risk during remote code execution operations. Remove the manual argparse definition and prop