{"data":{"id":"d1054312-2c5b-414d-bef4-3bc627028532","title":"CVE-2026-58474: whichllm before 0.5.16 contains a code injection vulnerability in the run and snippet commands that allows a remote…","summary":"whichllm before 0.5.16 has a code injection flaw in its run and snippet commands. A remote attacker who controls a HuggingFace repository can craft a GGUF filename containing double quotes or other special characters to execute arbitrary code on the user's machine, before any model download occurs. The script generation function in cli.py interpolates the rfilename value from the Hub API siblings field into generated Python source without escaping.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-58474","publishedAt":"2026-08-26T18:16:42.760Z","cveId":"CVE-2026-58474","cweIds":["CWE-94"],"cvssScore":"8.8","cvssSeverity":"high","severity":"high","attackType":["supply_chain","other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["HuggingFace"],"affectedVendorsRaw":["whichllm","HuggingFace"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"whichllm code injection in run and snippet commands via GGUF filenames","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"required","exploitMaturity":"unknown","epssScore":0.00858,"epssCheckedAt":"2026-11-04T18:09:13.386Z","kevDateAdded":null,"advisoryAliases":["GHSA-hfpc-7mr4-p297"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-02T00:08:53.096Z","patchAvailable":null,"disclosureDate":"2026-08-26T18:16:42.760Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-242"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":["AML.T0010"],"fixes":[]}}