Hiyouga Llama-Factory
5 CVEs affecting Hiyouga Llama-Factory. Latest disclosed: 2026-06-30. Critical: 1, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-58116 | Critical | 9.8 | 2026-06-30 | LLaMA-Factory through 0.9.5 contains a remote code execution vulnerability that allows attackers with WebUI access to execute arbitrary Python code by supplyin… |
CVE-2025-53002 | High | 8.3 | 2025-06-26 | LLaMA-Factory is a tuning library for large language models. A remote code execution vulnerability was discovered in LLaMA-Factory versions up to and including… |
CVE-2025-61784 | High | 7.6 | 2025-10-07 | LLaMA-Factory is a tuning library for large language models. Prior to version 0.9.4, a Server-Side Request Forgery (SSRF) vulnerability in the chat API allows… |
CVE-2024-52803 | High | 7.5 | 2024-11-21 | LLama Factory enables fine-tuning of large language models. A critical remote OS command injection vulnerability has been identified in the LLama Factory train… |
CVE-2025-46567 | Medium | 6.1 | 2025-05-01 | LLama Factory enables fine-tuning of large language models. Prior to version 1.0.0, a critical vulnerability exists in the `llamafy_baichuan2.py` script of the… |