llama-farm

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

llama-farm records in CISA KEV

No llama-farm vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-70738 CVE-2026-108760 · GHSA-fhw6-pmfp-fhhf

Unauthenticated API exposed on all interfaces in LlamaFarm

LOW 31

LlamaFarm through 0.0.34 contains an insecure default configuration that binds its unauthenticated FastAPI server to 0.0.0.0 on port 14345, while the lf CLI silently discards HOST overrides.

CVSS 4.0HIGH 7.2 Adjacent network No auth No interaction EPSS 0.00242 Published 2026-10-11 No fix listed CWE-1327

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0