CVE-2026-58116 - Vulnerability Details

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
June 30, 2026
Last Seen
July 1, 2026

Related Threat Clusters

  • Critical RCE Vulnerability Discovered in LLaMA-Factory WebUI

    A critical remote code execution vulnerability, CVE-2026-58116, has been identified in LLaMA-Factory versions up to 0.9.5. The flaw allows attackers to execute arbitrary Python code by supplying a malicious model path…

    3 articles · Updated July 1, 2026

Recent Intelligence Reports

  • Cvefeed High Severity Advisories Jun 30, 2026 CVE-2026-58116 - LLaMA-Factory 0.9.5 Remote Code Execution via WebUI Model Path cvefeed.io Open source — cvefeed.io · July 1, 2026
  • Critical RCE in LLaMA-Factory WebUI via Malicious Model Path — Mallory.Ai · June 30, 2026

Related Entities

Zero-day Exploit CWE-20 - Improper Input Validation T1059 - Command and Scripting Interpreter Hugging Face Transformers Library LLaMA-Factory Hugging Face LLaMA-Factory Remote Code Execution Via WebUI Model Path

CVSS v3.1 Breakdown