Hhiyouga

Products

Exploited and recent CVEs

• CVE-2026-85673 High 7.5 LLaMA-Factory SSRF Guard Bypass via Redirect and DNS Rebinding 0.5%
• CVE-2026-58116 Critical 9.8 LLaMA-Factory 0.9.5 Remote Code Execution via WebUI Model Path 0.9%
• CVE-2025-61784 High 7.6 LLaMA Factory's Chat API has Critical SSRF and LFI Vulnerabilities 0.4%
• CVE-2025-53002 High 8.3 LLaMA-Factory Remote Code Execution (RCE) Vulnerability 1.3%
• CVE-2025-46567 Medium 6.1 LLaMA-Factory Allows Arbitrary Code Execution via Unsafe Deserialization in Ilamafy_baichuan2.py 0.3%
• CVE-2024-52803 High 7.5 LLama Factory Remote OS Command Injection Vulnerability 2.3%