1124 matches found
LLama Factory Remote OS Command Injection Vulnerability
SummaryA critical remote OS command injection vulnerability has been identified in the Llama Factory training process. This vulnerability arises from improper handling of user input, allowing malicious actors to execute arbitrary OS commands on the host system. The issue is caused by insecure usa...
athina (1.1.0), llama-index-output-parsers-guardrails (>=0.0.1, <=0.6.0) potentially affected by CVE-2024-45858 via guardrails-ai (>=0.3.3, <=0.4.5)
guardrails-ai PYPI version =0.3.3, =0.0.1, =0.6.0 Source cves: CVE-2024-45858 Source advisory: OSV:PYSEC-2026-1432...
athina (1.1.0), llama-index-output-parsers-guardrails (>=0.0.1, <=0.6.0) potentially affected by CVE-2024-6961 via guardrails-ai (>=0.3.3, <=0.4.5)
guardrails-ai PYPI version =0.3.3, =0.0.1, =0.6.0 Source cves: CVE-2024-6961 Source advisory: OSV:PYSEC-2026-1431...
cy-ai-trainer (>=0.0.1, <=0.0.2), llama-index-packs-vanna (>=0.0.1, <=0.1.4) potentially affected by CVE-2024-5753 via vanna (>=0.0.30, <=0.0.36)
vanna PYPI version =0.0.30, =0.0.1, =0.0.1, =0.1.4 Source cves: CVE-2024-5753 Source advisory: OSV:PYSEC-2026-2002...
RunGptLLM class in LlamaIndex has a command injection
A command injection vulnerability exists in the RunGptLLM class of the llamaindex library, version 0.9.47, used by the RunGpt framework from JinaAI to connect to Language Learning Models LLMs. The vulnerability arises from the improper use of the eval function, allowing a malicious or compromised...
PYSEC-2026-1565 RunGptLLM class in LlamaIndex has a command injection
A command injection vulnerability exists in the RunGptLLM class of the llamaindex library, version 0.9.47, used by the RunGpt framework from JinaAI to connect to Language Learning Models LLMs. The vulnerability arises from the improper use of the eval function, allowing a malicious or compromised...
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Hiyouga Llama-Factory
CVE-2026-58116 — LLaMA-Factory WebUI RCE via trustremotecod...
CVE-2026-58116 LLaMA-Factory 0.9.5 Remote Code Execution via WebUI Model Path
LLaMA-Factory through 0.9.5 contains a remote code execution vulnerability that allows attackers with WebUI access to execute arbitrary Python code by supplying a malicious model path in the Chat or Training interfaces. The application passes user-supplied model path input unvalidated into...
CVE-2026-58116
LLaMA-Factory through 0.9.5 contains a remote code execution vulnerability that allows attackers with WebUI access to execute arbitrary Python code by supplying a malicious model path in the Chat or Training interfaces. The application passes user-supplied model path input unvalidated into...
CVE-2026-58116 LLaMA-Factory 0.9.5 Remote Code Execution via WebUI Model Path
LLaMA-Factory through 0.9.5 contains a remote code execution vulnerability that allows attackers with WebUI access to execute arbitrary Python code by supplying a malicious model path in the Chat or Training interfaces. The application passes user-supplied model path input unvalidated into...
CVE-2026-58116 LLaMA-Factory 0.9.5 Remote Code Execution via WebUI Model Path
LLaMA-Factory through 0.9.5 contains a remote code execution vulnerability that allows attackers with WebUI access to execute arbitrary Python code by supplying a malicious model path in the Chat or Training interfaces. The application passes user-supplied model path input unvalidated into...
CVE-2026-58116
LLaMA-Factory through 0.9.5 contains a remote code execution vulnerability that allows attackers with WebUI access to execute arbitrary Python code by supplying a malicious model path in the Chat or Training interfaces. The application passes user-supplied model path input unvalidated into...
CVE-2026-58116: Inclusion of Functionality from Untrusted Control Sphere
LLaMA-Factory through 0.9.5 contains a remote code execution vulnerability that allows attackers with WebUI access to execute arbitrary Python code by supplying a malicious model path in the Chat or Training interfaces. The application passes user-supplied model path input unvalidated into...
PT-2026-53876
Name of the Vulnerable Software and Affected Versions LLaMA-Factory versions prior to 0.9.6 Description Remote code execution is possible via the WebUI Chat and Training interfaces. The application fails to validate user-supplied model paths before passing them to the AutoTokenizer.from pretraine...
athina (1.1.0), guardrails-api (>=0.0.4, <=0.0.5) +1 more potentially affected by CVE-2026-31233 via guardrails-ai (>=0.3.3, <=0.5.15)
guardrails-ai PYPI version =0.3.3, =0.0.4, =0.0.1, =0.6.0 Source cves: CVE-2026-31233 Source advisory: OSV:PYSEC-2026-347...
cy-ai-trainer (>=0.0.1, <=0.0.2), llama-index-packs-vanna (>=0.0.1, <=0.1.4) potentially affected by CVE-2024-5826 via vanna (>=0.0.30, <=0.0.36)
vanna PYPI version =0.0.30, =0.0.1, =0.0.1, =0.1.4 Source cves: CVE-2024-5826 Source advisory: OSV:PYSEC-2026-562...
clarifai-datautils (>=0.0.3, <=0.0.7), langtrace-python-sdk (>=1.0.9, <=1.1.30) +376 more potentially affected by CVE-2024-45201 via llama-index-core (>=0.9.56, <=0.10.36)
llama-index-core PYPI version =0.9.56, =0.0.3, =1.0.9, =1.0.3.post1, =0.0.2, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.2, =0.1.0 and more Source cves: CVE-2024-45201 Source advisory: OSV:PYSEC-2026-395...
docsrag (>=0.1.3, <=0.1.6) potentially affected by CVE-2024-23730 via llama-hub (0.0.25)
llama-hub PYPI version 0.0.25 is affected by a known vulnerability. The following packages have a transitive dependency on llama-hub and may be impacted: - docsrag =0.1.3, =0.1.6 Source cves: CVE-2024-23730 Source advisory: OSV:PYSEC-2026-393...
PYSEC-2026-393 Unsafe yaml deserialization in llama-hub
The OpenAPI and ChatGPT plugin loaders in LlamaHub aka llama-hub before 0.0.67 allow attackers to execute arbitrary code because safeload is not used for YAML...
Unsafe yaml deserialization in llama-hub
The OpenAPI and ChatGPT plugin loaders in LlamaHub aka llama-hub before 0.0.67 allow attackers to execute arbitrary code because safeload is not used for YAML...