Skip to content
OpenAdvisories

Vendor

llama-farm

1 known vulnerabilities.

Products

llamafarm 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.6
    CVE-2026-108760

    LlamaFarm through 0.0.34 Unauthenticated API Exposed on All Interfaces

    LlamaFarm through 0.0.34 contains an insecure default configuration that binds its unauthenticated FastAPI server to 0.0.0.0 on port 14345, while the lf CLI silently discards HOST overrides. Network-adjacent attackers can call the project and dataset manageme…

    llama-farm llamafarm