AI Threat Alert

LLaMA Factory

pip MLOps

4

Total CVEs

2

Critical

pip

Ecosystem

Oct 7, 2025

Last CVE

Known Vulnerabilities (4 shown)

Severity CVE ID Summary CVSS Published

HIGH CVE-2025-61784 LLaMA-Factory: SSRF+LFI in multimodal chat API 8.1 Oct 7, 2025 CRITICAL CVE-2025-53002 LLaMA-Factory: RCE via unsafe checkpoint deserialization 9.8 Jun 26, 2025 HIGH CVE-2025-46567 LLaMA-Factory: RCE via torch.load() unsafe deserialization 7.8 May 1, 2025 CRITICAL CVE-2024-52803 LlamaFactory: RCE via OS command injection in training 9.8 Nov 21, 2024

Monitor LLaMA Factory in your stack

Get instant alerts when new vulnerabilities affect LLaMA Factory. CISO analysis, ATLAS technique mappings, and compliance reports included.

Start Monitoring