Found an RCE trust_remote_code=False bypass in huggingface Transformers. $750+ bounty

Missed out on Pwn2Own2026 Berlin because it was way too crowded this time. 🥲 Well, here’s the Ollama RCE that I was going to bring. Still unpatched and working (v0.22.1 in the video, but still working)

My first two CVEs(CVE-2025-66959, CVE-2025-66960) discovered in Ollama have been published. Just audit my eyes👀