CVE-2026-108760 llama-farm CVE debrief

Who should care

Defenders responsible for LlamaFarm instances, particularly those exposed to network-adjacent attackers, should assess their exposure and prioritize remediation. This includes operators, platform administrators, vulnerability management teams, and security teams who need to verify instance exposure, plan vendor-supported updates or mitigations, and review compensating controls.

Why it matters

CVE-2026-108760 exposes LlamaFarm instances to unauthenticated API access, allowing network-adjacent attackers to read sensitive data, modify projects, and delete projects. Defenders should verify exposure, prioritize remediation, and monitor for suspicious activity.

• Potential unauthorized access to sensitive data (provider API keys)
• Possible modification of projects and triggering of ingestion
• Risk of irreversible deletion of projects
• Need for verification of instance exposure and remediation

Technical summary

LlamaFarm through version 0.0.34 has an insecure default configuration that exposes its unauthenticated FastAPI server on all interfaces (0.0.0.0) on port 14345. This allows network-adjacent attackers to access the project and dataset management API, potentially leading to unauthorized reading of stored provider API keys, modification of projects, triggering ingestion, and irreversible deletion of projects.

Defensive priority

Verify and remediate exposed LlamaFarm instances

Recommended defensive actions

• Verify LlamaFarm instances for exposure to unauthenticated API
• Remediate by updating to a version beyond 0.0.34 or applying compensating controls
• Monitor for suspicious activity on port 14345
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE record and source item provide details on the insecure default configuration of LlamaFarm through version 0.0.34, which binds its unauthenticated FastAPI server to 0.0.0.0 on port 14345. The lf CLI silently discards HOST overrides, allowing network-adjacent attackers to call the project and dataset management API. Official CVE Program record and NIST NVD detail page confirm this vulnerability. Third-party advisories and technical descriptions provide additional context.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.