CVE-2026-58116

Katalog CVE

CVSS 8.8 · High EPSS 0,90%

Kerentanan Improper Control of Generation of Code ('Code Injection') pada hiyouga llama-factory. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

LLaMA-Factory through 0.9.5 contains a remote code execution vulnerability that allows attackers with WebUI access to execute arbitrary Python code by supplying a malicious model path in the Chat or Training interfaces. The application passes user-supplied model path input unvalidated into AutoTokenizer.from_pretrained() and AutoModel.from_pretrained() with a hardcoded trust_remote_code=True parameter, causing the Hugging Face transformers library to fetch and execute arbitrary code from a remote or local model repository with the privileges of the server process.

Rincian

Terbit di NVD

30 Juni 2026

Terakhir diubah

14 Juli 2026

Status NVD

Analyzed

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-94: Improper Control of Generation of Code ('Code Injection')
CWE-829: Inclusion of Functionality from Untrusted Control Sphere

EPSS (30 hari)

0,90% peluang dieksploitasi; lebih tinggi dari 58,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://gist.github.com/henrrrychau/08d76ec672f42136bbc1449c4f2973f8 exploit · mitigasi · advisory pihak ketiga
• https://www.vulncheck.com/advisories/llama-factory-remote-code-execution-via-webui-model-path advisory pihak ketiga