Vendor

    Hiyouga

    6 known vulnerabilities in products by Hiyouga, 0 of them actively exploited (CISA KEV).

    Key figures

    6

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Hiyouga
    CriticalCVE-2024-52803

    LLama Factory Remote OS Command Injection Vulnerability

    		7.5
    CriticalCVE-2026-58116

    LLaMA-Factory 0.9.5 Remote Code Execution via WebUI Model Path

    		8.8
    CriticalCVE-2025-53002

    LLaMA-Factory Remote Code Execution (RCE) Vulnerability

    		8.3
    HighCVE-2026-85673

    LLaMA-Factory SSRF Guard Bypass via Redirect and DNS Rebinding

    		7.5
    HighCVE-2025-61784

    LLaMA Factory's Chat API has Critical SSRF and LFI Vulnerabilities

    		7.6
    HighCVE-2025-46567

    LLaMA-Factory Allows Arbitrary Code Execution via Unsafe Deserialization in Ilamafy_baichuan2.py

    		6.1

    News

    Products

    Products by Hiyouga
    LLaMA-Factory50