llama-factory-webui-rce-cve-2026-58116-trust-remote-code-model-path-injection

CVE-2026-58116 — LLaMA-Factory WebUI RCE trustremotecode를 통한 CVE-2026-58116 CVSS 9.8 심각에 대한 개념 증명: LLaMA-Factory = v0.9.5에서의 원격 코드 실행. LLaMA-Factory WebUI는 모델 로드 시 trustremotecode=True를 하드코딩합니다 src/llamafactory/webui/chatter.py:139 및 runner.py:175,320. 공격자가 제어하는 "Model path" 필드는 검증되지 않은 상태로...

PT-2026-102861

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 154.0.8037.92 Description Cross-site scripting in the WebUI allows a remote attacker to bypass the web origin policy—a security mechanism that restricts how a document or script loaded from one origin can intera...

CVE-2026-102329: Improper Neutralization of Input During Web Page Generation

Cross-site scripting in WebUI in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: High...

GHSA-HQJ7-PHWP-C3FP vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-81726 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-8MGP-746C-J5XP vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-HQJ7-PHWP-C3FP vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-81726 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-8MGP-746C-J5XP vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-86000 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-85999 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-GJV8-XP57-G29C vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-J934-XHV5-FG8F vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-HP3V-5VW7-FX9W vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-76825 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-76825 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-HP3V-5VW7-FX9W vulnerabilities

Vulnerabilities for packages: open-webui...

Linux Distros Unpatched Vulnerability : CVE-2026-91735

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in WebUI in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execu...

lightrag-hku: Stored Cross-Site Scripting (XSS) in the LightRAG WebUI chat/answer renderer via ingested content

Summary The LightRAG WebUI renders assistant/answer chat content as raw HTML — react-markdown is configured with rehypePlugins=rehypeRaw and skipHtml=false and no HTML sanitizer rehype-sanitize, element allow-list, or custom urlTransform. Because answer content is derived from user-ingested...

GHSA-XPJQ-3W4W-W5WR lightrag-hku: Stored Cross-Site Scripting (XSS) in the LightRAG WebUI chat/answer renderer via ingested content

Summary The LightRAG WebUI renders assistant/answer chat content as raw HTML — react-markdown is configured with rehypePlugins=rehypeRaw and skipHtml=false and no HTML sanitizer rehype-sanitize, element allow-list, or custom urlTransform. Because answer content is derived from user-ingested...