LLama Factory enables fine-tuning of large language models.
Date: 2025-05
Affected: hiyouga/llama-factory
Attack vector: deserialization
Category: vulnerability-disclosure
Severity: High
CVE: CVE-2024-52803
CVE-2025-46567
CWE: CWE-502
CWE-78
CWE-79
CVSS: 6.1 (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L)

LLama Factory enables fine-tuning of large language models. Prior to version 1.0.0, a critical vulnerability exists in the `llamafy_baichuan2.py` script of the LLaMA-Factory project. The script performs insecure deserialization using `torch.load()` on user-supplied `.bin` files from an input directory. An attacker can exploit this behavior by crafting a malicious `.bin` file that executes arbitrary commands during deserialization. This issue has been patched in version 1.0.0.


Mitigations:

Architectural layers (MAESTRO):