Skip to content

Hiyouga Llamafactory vulnerabilities

hiyouga llamafactoryLLaMA-Factory SSRF Guard Bypass via Redirect and DNS RebindingCVE-2026-856738.7 HighSeptember 4, 2026
hiyouga llama-factory, llamafactory +1 moreLLaMA-Factory 0.9.5 Remote Code Execution via WebUI Model PathCVE-2026-581169.3 CriticalJune 30, 2026