Vulnerability · Published Nov 21, 2024 · Assigned by GitHub_M
CVE-2024-52803LLama Factory Remote OS Command Injection Vulnerability
High 7.5
In plain English
A high-severity cross-site scripting in LLaMA-Factory from hiyouga. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 2.3% (higher than 84% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
LLama Factory enables fine-tuning of large language models. A critical remote OS command injection vulnerability has been identified in the LLama Factory training process. This vulnerability arises from improper handling of user input, allowing malicious actors to execute arbitrary OS commands on the host system. The issue is caused by insecure usage of the `Popen` function with `shell=True`, coupled with unsanitized user input. Immediate remediation is required to mitigate the risk. This vulnerability is fixed in 0.9.1.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| PyPI | llamafactory | 0.9.1 | GHSA-hj3w-wrh4-44vp |
| PyPI | llamafactory | 0.9.1 | PYSEC-2026-1575 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| hiyouga | LLaMA-Factory | < 0.9.1 |
Weakness: CWE-79 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N