CVE-2026-58116: LLaMA-Factory through 0.9.5 contains a remote code execution vulnerability that allows attackers with WebUI access to ex

LLaMA-Factory (a tool for customizing large language models) versions up to 0.9.5 has a remote code execution vulnerability where attackers with access to the web interface can run malicious code by providing a fake model path in the Chat or Training sections. The vulnerability exists because the application doesn't validate user input before passing it to code that loads models, and it uses a setting called trust_remote_code=True, which tells the underlying Hugging Face library to automatically execute any code included with the model files.