All 2 CVE vulnerabilities found in LlamaFactory, with AI-generated Chinese analysis, references, and POCs.
Vendor: hiyouga
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-85673 | LLaMA-Factory SSRF Guard Bypass via Redirect and DNS Rebinding CWE-918 | 7.5 | High | 2026-09-04 |
| CVE-2026-58116 | LLaMA-Factory 0.9.5 Remote Code Execution via WebUI Model Path CWE-829 | 9.8 | Critical | 2026-06-30 |
All 2 known CVE vulnerabilities affecting LlamaFactory with full Chinese analysis, references, and POCs where available.