Vulnerabilities

LLaMA-Factory contains a server-side request forgery vulnerability in the OpenAI-compatible API multimodal media URL handler that allows unauthenticated attackers to bypass SSRF validation.

LLaMA-Factory through 0.9.5 contains a remote code execution vulnerability that allows attackers with WebUI access to execute arbitrary Python code by supplying a malicious model path in the Chat or Training interfaces.

LLaMA-Factory is a tuning library for large language models.

LLaMA-Factory is a tuning library for large language models.

LLama Factory enables fine-tuning of large language models.

LLama Factory enables fine-tuning of large language models.