CVE-2026-58116
CRITICAL
INFO
Priority: 0.08
BB Relevance:
79/100
Published: 2026-06-30
Modified: 2026-10-25
First seen: 2026-10-29
Status: active
Attack Surface
Network
Low Complexity
No Auth
No Interaction
Conf. Impact
Integ. Impact
CVSS Vector Breakdown
AV:
Network
AC:
Low
PR:
None
UI:
None
S:
X
AT:
None
VC:
High
VI:
High
VA:
High
Description
LLaMA-Factory through 0.9.5 contains a remote code execution vulnerability that allows attackers with WebUI access to execute arbitrary Python code by supplying a malicious model path in the Chat or Training interfaces. The application passes user-supplied model path input unvalidated into AutoTokenizer.from_pretrained() and AutoModel.from_pretrained() with a hardcoded trust_remote_code=True parameter, causing the Hugging Face transformers library to fetch and execute arbitrary code from a remote or local model repository with the privileges of the server process.
Affected Software (1)
| Vendor | Product | Version |
|---|---|---|
| hiyouga | llama-factory | < 0.9.5 |
References & Advisories (2)
Third Party Advisory
Exploit
Mitigation
Third Party Advisory