What’s Vulnerable › Products

hiyouga LLaMA-Factory vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your hiyouga LLaMA-Factory version is affected

Latest hiyouga LLaMA-Factory vulnerabilities

• CVE-2026-58116 — LLaMA-Factory 0.9.5 Remote Code Execution via WebUI Model Path (CVSS 8.8)
• CVE-2025-61784 — LLaMA Factory's Chat API has Critical SSRF and LFI Vulnerabilities (CVSS 8.1)
• CVE-2025-53002 — LLaMA-Factory Remote Code Execution (RCE) Vulnerability (CVSS 9.8)
• CVE-2025-46567 — LLaMA-Factory Allows Arbitrary Code Execution via Unsafe Deserialization in Ilamafy_baichuan2.py (CVSS 7.8)
• CVE-2024-52803 — LLama Factory Remote OS Command Injection Vulnerability (CVSS 9.8)