Llama Chinese
Monthly
Code injection in Llama-Chinese's Gradio chat demo (examples/chat_gradio_no_merge.py) lets unauthenticated remote attackers run arbitrary code when an operator loads an attacker-influenced value for base_model_name_or_path. Exposed deployments of the example script are the realistic attack surface; the project uses a rolling release with no disclosed version and has not responded to the issue report. Publicly available exploit code exists, but there is no CISA KEV confirmation of active exploitation.
Code injection in Llama-Chinese's Gradio chat demo (examples/chat_gradio_no_merge.py) lets unauthenticated remote attackers run arbitrary code when an operator loads an attacker-influenced value for base_model_name_or_path. Exposed deployments of the example script are the realistic attack surface; the project uses a rolling release with no disclosed version and has not responded to the issue report. Publicly available exploit code exists, but there is no CISA KEV confirmation of active exploitation.