Lucene search
K

Remote Code Execution (RCE)

๐Ÿ—“๏ธย 01 Jul 2025ย 04:31:35Reported byย Veracode Vulnerability DatabaseTypeย 
veracode
ย veracode
๐Ÿ”—ย sca.analysiscenter.veracode.com๐Ÿ‘ย 2ย Views

llamafactory is vulnerable to Remote Code Execution due to unsafe loading of the vhead_file argument.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
Circl
CVE-2025-53002
26 Jun 202506:03
โ€“circl
CNNVD
LLaMA-Factory ไปฃ็ ้—ฎ้ข˜ๆผๆดž
26 Jun 202500:00
โ€“cnnvd
CVE
CVE-2025-53002
26 Jun 202514:40
โ€“cve
Cvelist
CVE-2025-53002 LLaMA-Factory Remote Code Execution (RCE) Vulnerability
26 Jun 202514:40
โ€“cvelist
EUVD
EUVD-2025-19200
3 Oct 202520:07
โ€“euvd
Github Security Blog
LLaMA-Factory allows Code Injection through improper vhead_file safeguards
27 Jun 202515:27
โ€“github
NVD
CVE-2025-53002
26 Jun 202515:15
โ€“nvd
OSV
CVE-2025-53002 LLaMA-Factory Remote Code Execution (RCE) Vulnerability
26 Jun 202514:40
โ€“osv
OSV
GHSA-XJ56-P8MM-QMXJ LLaMA-Factory allows Code Injection through improper vhead_file safeguards
27 Jun 202515:27
โ€“osv
Positive Technologies
PT-2025-26979
26 Jun 202500:00
โ€“ptsecurity
Rows per page
Vulners
Node
llamafactoryllamafactoryRange0.7.1โ€“0.9.3python
OR
llamafactoryllamafactoryMatch0.7.1python
OR
llamafactoryllamafactoryMatch0.8.0python
OR
llamafactoryllamafactoryMatch0.8.1python
OR
llamafactoryllamafactoryMatch0.8.2python
OR
llamafactoryllamafactoryMatch0.8.3python
OR
llamafactoryllamafactoryMatch0.9.0python
OR
llamafactoryllamafactoryMatch0.9.1python
OR
llamafactoryllamafactoryMatch0.9.2python

Data

Build on a solid foundation withย Vulners data

Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data

Api

Power your application withย Vulners API

The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access

App

Assess and manage vulnerabilities withย Vulnersย tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

03 Jun 2026 09:54Current
8.4High risk
Vulners AI Score8.4
CVSS 3.18.3 - 9.8
EPSS0.04222
SSVC
2