Hiyouga

5 CVEs across 2 Hiyouga products. Browse Hiyouga vulnerabilities, severities, and proof-of-concept exploits.

Hiyouga products with known CVEs

ProductCVEs
Llama-Factory5
Llamafactory1
Hiyouga CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-58116Critical9.82026-06-30LLaMA-Factory through 0.9.5 contains a remote code execution vulnerability that allows attackers with WebUI access to execute arbitrary Python code by supplyin…
CVE-2025-61784High7.62025-10-07LLaMA-Factory is a tuning library for large language models. Prior to version 0.9.4, a Server-Side Request Forgery (SSRF) vulnerability in the chat API allows…
CVE-2025-53002High8.32025-06-26LLaMA-Factory is a tuning library for large language models. A remote code execution vulnerability was discovered in LLaMA-Factory versions up to and including…
CVE-2025-46567Medium6.12025-05-01LLama Factory enables fine-tuning of large language models. Prior to version 1.0.0, a critical vulnerability exists in the `llamafy_baichuan2.py` script of the…
CVE-2024-52803High7.52024-11-21LLama Factory enables fine-tuning of large language models. A critical remote OS command injection vulnerability has been identified in the LLama Factory train…