LLama Factory Remote OS Command Injection Vulnerability

SummaryA critical remote OS command injection vulnerability has been identified in the Llama Factory training process. This vulnerability arises from improper handling of user input, allowing malicious actors to execute arbitrary OS commands on the host system. The issue is caused by insecure usa...

PT-2024-35454

Name of the Vulnerable Software and Affected Versions LLama Factory versions =0.9.0 Description A critical remote OS command injection vulnerability has been identified in the LLama Factory training process. This issue arises from improper handling of user input, allowing malicious actors to...