Insecure Deserialization Vulnerability in LLaMA-Factory by Hiyouga

CVE-2025-46567

What is CVE-2025-46567?

LLaMA-Factory, a tool for fine-tuning large language models, contains a vulnerability in the llamafy_baichuan2.py script prior to version 1.0.0. This vulnerability allows an attacker to exploit insecure deserialization through the use of torch.load() on user-supplied .bin files. By creating a malicious .bin file, an attacker can execute arbitrary commands during the deserialization process, posing significant security risks. The issue has been addressed in version 1.0.0.

References