VendorsHiyougallama-factoryany version
Vulnerabilities

Hiyouga LLaMA-Factory any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

5CVEs
CVE-2024-52803
LLama Factory Remote OS Command Injection Vulnerability
Published 2024-11-21 · Analyzed
9.8EPSS 0.023
CVE-2025-53002
LLaMA-Factory Remote Code Execution (RCE) Vulnerability
Published 2025-06-26 · Analyzed
9.8EPSS 0.012
CVE-2026-58116
LLaMA-Factory 0.9.5 Remote Code Execution via WebUI Model Path
Published 2026-06-30 · Analyzed
9.8EPSS 0.009
CVE-2025-61784
LLaMA Factory's Chat API has Critical SSRF and LFI Vulnerabilities
Published 2025-10-07 · Analyzed
8.1EPSS 0.004
CVE-2025-46567
LLaMA-Factory Allows Arbitrary Code Execution via Unsafe Deserialization in Ilamafy_baichuan2.py
Published 2025-05-01 · Analyzed
7.8EPSS 0.003