Llamafarm
Monthly
Unauthenticated network access to the LlamaFarm management API on port 14345 allows adjacent attackers to read stored provider API keys, modify projects, trigger data ingestion, and irreversibly delete projects in versions through 0.0.34. The insecure default binds the FastAPI server to 0.0.0.0, and the lf CLI silently ignores HOST overrides, preventing easy remediation. Exploitation requires the attacker to be on the same network segment (CVSS AV:A), and no public exploit code has been identified at time of analysis.
Unauthenticated network access to the LlamaFarm management API on port 14345 allows adjacent attackers to read stored provider API keys, modify projects, trigger data ingestion, and irreversibly delete projects in versions through 0.0.34. The insecure default binds the FastAPI server to 0.0.0.0, and the lf CLI silently ignores HOST overrides, preventing easy remediation. Exploitation requires the attacker to be on the same network segment (CVSS AV:A), and no public exploit code has been identified at time of analysis.