LlamaFactory vulnerabilities

2 known vulnerabilities in LlamaFactory from Hiyouga. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  LlamaFactory: Server-Side Request Forgery

  CVE-2026-85673Sep 4, 2026Hiyouga

  LLaMA-Factory contains a server-side request forgery vulnerability in the OpenAI-compatible API multimodal media URL handler that allows unauthenticated attackers to bypass SSRF validation. The check_ssrf_url guard validates URLs once but requests.get follows

• 8.8 High severity

  LlamaFactory: Improper Control of Generation of Code

  CVE-2026-58116Jun 30, 2026Hiyouga

  LLaMA-Factory through 0.9.5 contains a remote code execution vulnerability that allows attackers with WebUI access to execute arbitrary Python code by supplying a malicious model path in the Chat or Training interfaces. The application passes user-supplied mod