This release includes 1 security fix for security teams reviewing exposed deployments.
Topics
+13 more
Affected surfaces
ReleasePort's take
Moderate signalUpdate all vulnerable runtime dependencies to their patched versions.
Why it matters: Patching affected runtime dependencies mitigates known security risks; address any dependency with severity ≥80 immediately.
Summary
AI summaryBroad release touches Other Studio improvements, Studio, Install, Runtime & Hardware, and MCP.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Security | High |
Update vulnerable dependencies to patched versions. Update vulnerable dependencies to patched versions. Source: llm_adapter@2026-06-03 Confidence: high |
— |
| Feature | Medium |
Add HTML artifacts to chat in Unsloth Studio. Add HTML artifacts to chat in Unsloth Studio. Source: llm_adapter@2026-06-03 Confidence: high |
— |
| Feature | Medium |
Raise Studio upload limits for training datasets and recipes. Raise Studio upload limits for training datasets and recipes. Source: llm_adapter@2026-06-03 Confidence: high |
— |
| Feature | Medium |
Persist Tauri window size and maximized state across launches in Unsloth Studio. Persist Tauri window size and maximized state across launches in Unsloth Studio. Source: llm_adapter@2026-06-03 Confidence: high |
— |
| Feature | Medium |
Move MCP to a composer button with presets (Context7, Exa, Hugging Face). Move MCP to a composer button with presets (Context7, Exa, Hugging Face). Source: llm_adapter@2026-06-03 Confidence: high |
— |
| Feature | Medium |
Manage chat history with projects in Unsloth Studio. Manage chat history with projects in Unsloth Studio. Source: llm_adapter@2026-06-03 Confidence: high |
— |
| Feature | Medium |
Introduce Gemma 4 12B model that runs locally on 8 GB RAM with image, audio and 256K context support. Introduce Gemma 4 12B model that runs locally on 8 GB RAM with image, audio and 256K context support. Source: granite4.1:30b@2026-06-03-audit Confidence: low |
— |
| Feature | Medium |
Add new Chat UI with + menu for Projects, Canvas, MCP and Compare; unify Search and Code access. Add new Chat UI with + menu for Projects, Canvas, MCP and Compare; unify Search and Code access. Source: granite4.1:30b@2026-06-03-audit Confidence: low |
— |
| Feature | Low |
Support interactive HTML canvas artifacts in Unsloth Studio with preview/source toggle. Support interactive HTML canvas artifacts in Unsloth Studio with preview/source toggle. Source: granite4.1:30b@2026-06-03-audit Confidence: low |
— |
| Performance | Low |
Optimize chat streaming by batching renders to one per animation frame. Optimize chat streaming by batching renders to one per animation frame. Source: granite4.1:30b@2026-06-03-audit Confidence: low |
— |
| Bugfix | High |
Fix macOS Apple Silicon installs resolving torch against x86_64. Fix macOS Apple Silicon installs resolving torch against x86_64. Source: llm_adapter@2026-06-03 Confidence: high |
— |
| Bugfix | Medium |
Fix CUDA 13.2 gibberish‑output bug on Windows; add fallback to CUDA 12.4 and upcoming native 13.1 binaries. Fix CUDA 13.2 gibberish‑output bug on Windows; add fallback to CUDA 12.4 and upcoming native 13.1 binaries. Source: llm_adapter@2026-06-03 Confidence: high |
— |
| Bugfix | Medium |
Fix UnicodeEncodeError when printing emoji on legacy Windows consoles. Fix UnicodeEncodeError when printing emoji on legacy Windows consoles. Source: llm_adapter@2026-06-03 Confidence: high |
— |
| Bugfix | Medium |
Defer Windows CUDA Toolkit check so prebuilt users are not blocked. Defer Windows CUDA Toolkit check so prebuilt users are not blocked. Source: llm_adapter@2026-06-03 Confidence: high |
— |
Full changelog
Hey everyone, this update focuses mainly on MCP, Projects, Canvas and the new chat UI.
We've also made many improvements across Studio. Next week we'll have an even bigger update.
To update Unsloth or install a new Unsloth Studio, you must use:
macOS, Linux, WSL:
curl -fsSL https://unsloth.ai/install.sh | sh
Windows:
irm https://unsloth.ai/install.ps1 | iex
[!WARNING]
DO NOT USEunsloth studio updatesince packaging will not get the latest updates
Gemma 4 12B
Google releases Gemma 4 12B, a new model that runs locally on 8GB RAM. GGUF / Guide
Gemma 4 12B Unified supports image, audio and 256K context. Run and train the model via Unsloth Studio.
MCP
- Give your model live tools instead of relying on memory one click in the composer, no API keys for the built-ins
- Built-in presets:
- Context7 current docs & code for thousands of libraries
- Exa live web search
- Hugging Face search models, datasets & papers
- Add your own remote (OAuth/headers) or local (stdio) servers, toggled per chat
New Chat UI
- Projects, Canvas,
MCP, and Compare tuck into one+menu - Search and Code are now one click away
Projects
- Keep related chats together in one workspace
- Create a project from the sidebar, then add new or existing chats to it
Experimental Canvas / Artifacts
- Opens generated HTML in a dedicated canvas panel inside Unsloth Studio
- Supports interactive outputs, including browser based visualizations and CDN-loaded packages
- Lets you switch between rendered preview and source code
Install, Runtime & Hardware
- CUDA / Windows
- CUDA 13.3
llama.cppbinaries now work on Windows (and other non-Linux) and fix the CUDA 13.2 gibberish-output bug while default still pins to CUDA 13.1 for now - On CUDA 13.2, 13.1 and below, Windows falls back to CUDA 12.4 and native 13.1 binaries coming soon
- Windows prebuilt installs no longer block on the early
CUDA Toolkitcheck
- CUDA 13.3
- Linux / GPU
- Linux
llama.cppprebuilts now match your runtime'scudartmajor version - Prebuilt coverage for
Blackwell(with a CUDA 13.0 driver fallback) andB300(sm_103) ARM64Linux now source-builds on GPU hosts, with a CPU prebuilt fallbackROCm: detected AMDgfxarch is forwarded to the prebuilt installer (with asetup.shfallback)
- Linux
- macOS
- Fixed Apple Silicon installs that were resolving
torchagainst x86_64
- Fixed Apple Silicon installs that were resolving
Other Studio improvements
- Connected models now work in Compare mode
- Smoother streaming which now renders batched to one per animation frame
- Larger upload limits for training datasets and recipe
- Window size and maximized state persist across launches
- Chat search hides non-matching threads
- Model loading handles mid-refresh cancellation cleanly
- Cleaner rendering for generated image frames and Python tool code blocks
What's Changed
- Bump install.sh / install.ps1 pin to unsloth>=2026.5.9 by @danielhanchen in https://github.com/unslothai/unsloth/pull/5904
- Update README.md by @danielhanchen in https://github.com/unslothai/unsloth/pull/5905
- Use remove-circle icon for eject model button by @shimmyshimmer in https://github.com/unslothai/unsloth/pull/5906
- Studio: add HTML artifacts to chat by @wasimysaid in https://github.com/unslothai/unsloth/pull/5772
- Use natural generated image frame by @wasimysaid in https://github.com/unslothai/unsloth/pull/5794
- Studio: defer the Windows CUDA Toolkit check so prebuilt users are not blocked by @danielhanchen in https://github.com/unslothai/unsloth/pull/5912
- Studio CI: tolerate transient artifact-upload flakes on diagnostic log steps by @danielhanchen in https://github.com/unslothai/unsloth/pull/5913
- Studio: match the Linux llama.cpp prebuilt to the runtime cudart major by @danielhanchen in https://github.com/unslothai/unsloth/pull/5914
- Studio: extend the pinned Blackwell GPU fallback to CUDA 13.0 drivers by @danielhanchen in https://github.com/unslothai/unsloth/pull/5920
- Studio: source-build arm64 Linux GPU hosts, with a CPU prebuilt fallback by @danielhanchen in https://github.com/unslothai/unsloth/pull/5924
- Studio CI: run the Resolve-CudaToolkit unit test in the Windows GGUF job by @danielhanchen in https://github.com/unslothai/unsloth/pull/5921
- Studio: forward the resolved AMD gfx arch to the prebuilt installer by @danielhanchen in https://github.com/unslothai/unsloth/pull/5923
- Studio CI: tolerate transient runner crashes in the llama-server log collection step by @danielhanchen in https://github.com/unslothai/unsloth/pull/5925
- Studio: forward --has-rocm from setup.sh when gfx resolution fails by @LeoBorcherding in https://github.com/unslothai/unsloth/pull/5927
- Studio: cover B300 (sm_103) with the Linux prebuilt bundles by @danielhanchen in https://github.com/unslothai/unsloth/pull/5930
- Studio: move MCP to a composer button with presets by @danielhanchen in https://github.com/unslothai/unsloth/pull/5926
- Studio: clearer MCP server validation when stdio is disabled by @oobabooga in https://github.com/unslothai/unsloth/pull/5928
- Bump install.sh / install.ps1 pin to unsloth>=2026.5.10 by @danielhanchen in https://github.com/unslothai/unsloth/pull/5931
- Studio: support connected models in compare mode by @Imagineer99 in https://github.com/unslothai/unsloth/pull/5824
- Studio: manage chat history with projects by @Imagineer99 in https://github.com/unslothai/unsloth/pull/5725
- fix(chat): refine artifact panel styling by @wasimysaid in https://github.com/unslothai/unsloth/pull/5922
- studio/frontend: pad Python tool code block to fix corner clipping by @oobabooga in https://github.com/unslothai/unsloth/pull/5938
- Studio: polish model load toast styling by @Imagineer99 in https://github.com/unslothai/unsloth/pull/5648
- Studio: optimize chat streaming by batching renders to one per animation frame by @oobabooga in https://github.com/unslothai/unsloth/pull/5788
- Raise Studio upload limits by @wasimysaid in https://github.com/unslothai/unsloth/pull/5808
- Studio: persist Tauri window size and maximized state across launches by @oobabooga in https://github.com/unslothai/unsloth/pull/5799
- Guard model-load success path against mid-refresh cancellation by @rolandtannous in https://github.com/unslothai/unsloth/pull/5944
- [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in https://github.com/unslothai/unsloth/pull/5935
- feature/dataset_none_detect.py adds empty content detection for conversation datasets by @LeoBorcherding in https://github.com/unslothai/unsloth/pull/4438
- studio/chat: hide non-matching threads in chat search (#5572) by @wtfashwin in https://github.com/unslothai/unsloth/pull/5651
- Update vulnerable dependencies to patched versions by @danielhanchen in https://github.com/unslothai/unsloth/pull/5970
- fix(studio): make the reset-password hint work on Windows, macOS, and Linux by @danielhanchen in https://github.com/unslothai/unsloth/pull/5971
- Document install env vars in README advanced launch options by @danielhanchen in https://github.com/unslothai/unsloth/pull/5972
- Update Install Scripts by @danielhanchen in https://github.com/unslothai/unsloth/pull/5968
- Logging cleanup by @danielhanchen in https://github.com/unslothai/unsloth/pull/5973
- studio: redesign chat composer by @shimmyshimmer in https://github.com/unslothai/unsloth/pull/5891
- fix(studio): don't double-quote the reset-password hint for paths with spaces by @danielhanchen in https://github.com/unslothai/unsloth/pull/5975
- Patch other imports of trainer and config by @Datta0 in https://github.com/unslothai/unsloth/pull/5946
- Fix UnicodeEncodeError when printing emoji on legacy Windows consoles by @danielhanchen in https://github.com/unslothai/unsloth/pull/5948
- Fix macOS Apple Silicon installs resolving torch against x86_64 by @danielhanchen in https://github.com/unslothai/unsloth/pull/5976
Full Changelog: https://github.com/unslothai/unsloth/compare/v0.1.43-beta...v0.1.44-beta
Security Fixes
- Update vulnerable dependencies to patched versions
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Unsloth
All releases →Related context
Related tools
Earlier breaking changes
- v0.1.43-beta Do not use `unsloth studio update`; it does not fetch latest updates.
- v0.1.40-beta Auto MTP speculative decoding enabled by default for MTP GGUFs; warns on stale llama.cpp prebuilt
Beta — feedback welcome: [email protected]