Llama-farm vulnerabilities
We track 1 vulnerability in Llama-farm products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 11, 2026.
1vulnerabilities
0critical
1high
0exploited
7.6average CVSS score
Latest Llama-farm vulnerabilities
- 7.6 High severity
llamafarm: Binding to an Unrestricted IP Address
LlamaFarm through 0.0.34 contains an insecure default configuration that binds its unauthenticated FastAPI server to 0.0.0.0 on port 14345, while the lf CLI silently discards HOST overrides. Network-adjacent attackers can call the project and dataset managemen