Vulnerabilities

TI-2026-41855 CVE-2026-58116 · GHSA-mwc7-mf87-v3mf

LLaMA-Factory 0.9.5 Remote Code Execution via WebUI Model Path

HIGH 81

LLaMA-Factory through 0.9.5 contains a remote code execution vulnerability that allows attackers with WebUI access to execute arbitrary Python code by supplying a malicious model path in the Chat or Training interfaces.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00904 Published 2026-06-30 No fix listed CWE-829

TI-2025-38177 CVE-2025-61784 · GHSA-527m-2xhr-j27g

LLaMA Factory's Chat API has Critical SSRF and LFI Vulnerabilities

HIGH 68

LLaMA-Factory is a tuning library for large language models.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00383 Published 2025-10-07 Fixed in 0.9.4 CWE-22

TI-2025-33006 CVE-2025-53002 · GHSA-xj56-p8mm-qmxj

LLaMA-Factory Remote Code Execution (RCE) Vulnerability

HIGH 75

LLaMA-Factory is a tuning library for large language models.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0127 Published 2025-06-26 Fixed in 0.9.4 CWE-502

TI-2025-29280 CVE-2025-46567 · GHSA-f2f7-gj54-6vpv

LLaMA-Factory Allows Arbitrary Code Execution via Unsafe Deserialization in Ilamafy_baichuan2.py

HIGH 67

LLama Factory enables fine-tuning of large language models.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00285 Published 2025-05-01 Fixed in 1.0.0, 0.9.3 CWE-502

TI-2024-35316 CVE-2024-52803 · GHSA-hj3w-wrh4-44vp

LLama Factory Remote OS Command Injection Vulnerability