llamafarm vulnerabilities
1 known vulnerability in llamafarm from Llama-farm. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.6average CVSS score
Latest first
- 7.6 High severity
llamafarm: Binding to an Unrestricted IP Address
LlamaFarm through 0.0.34 contains an insecure default configuration that binds its unauthenticated FastAPI server to 0.0.0.0 on port 14345, while the lf CLI silently discards HOST overrides. Network-adjacent attackers can call the project and dataset managemen