Skip to content
OpenAdvisories

Product · Andyyyy64

whichllm

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-58474

    whichllm < 0.5.16 Code Injection via run and snippet commands

    whichllm before 0.5.16 contains a code injection vulnerability in the run and snippet commands that allows a remote attacker who controls a HuggingFace repository to achieve arbitrary code execution by crafting a malicious GGUF filename containing double quot…

    Andyyyy64 whichllm