CVE-2026-58116

CVE

Threat entity extracted from intelligence sources

Frequency

2

occurrences

First Seen

June 30, 2026

Last Seen

July 1, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical RCE Vulnerability Discovered in LLaMA-Factory WebUI72.6

A critical remote code execution vulnerability, CVE-2026-58116, has been identified in LLaMA-Factory versions up to 0.9.5. The flaw allows attackers to execute arbitrary Python code by supplying a malicious model path in the WebUI Chat and Training interfaces. This vulnerability is due to unvalidate...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical RCE Vulnerability Discovered in LLaMA-Factory WebUI

Jul 1·3 sources

Related Articles (2)

Cvefeed High Severity Advisories Jun 30, 2026 CVE-2026-58116 - LLaMA-Factory 0.9.5 Remote Code Execution via WebUI Model Path cvefeed.io Open source

cvefeed.io·Jul 1

Critical RCE in LLaMA-Factory WebUI via Malicious Model Path

Mallory.Ai·Jun 30

Related Entities

Zero-day Exploit CWE-20 - Improper Input Validation T1059 - Command and Scripting Interpreter LLaMA-Factory Hugging Face Transformers Library Hugging Face LLaMA-Factory Remote Code Execution Via WebUI Model Path