Live › vulnerability › CVE-2024-23730
Go to dashboardLlamaHub's OpenAPI and ChatGPT plugin loaders parse YAML with an unsafe loader instead of safe_load. A crafted YAML document loaded by these plugins can make the process execute arbitrary code.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 17:32 UTC, 0h before NVD. All times on this page are UTC.
Applications that use the llama-hub Python package before 0.0.67 and load OpenAPI or ChatGPT plugin definitions through its YAML loaders are exposed. The risk is highest where the YAML comes from users or third parties. Teams that do not use these loaders, or that only load trusted local files, are less exposed.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| llama-hub | pypi | < 0.0.67 | 0.0.67 |
| llamahub | vendor | < 0.0.67 | 0.0.67 |
pip show llama-hub and check whether the version is below 0.0.67llama_hub imports of the OpenAPI or ChatGPT plugin loadersllama-hub to 0.0.67 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
The OpenAPI and ChatGPT plugin loaders in LlamaHub (aka llama-hub) before 0.0.67 allow attackers to execute arbitrary code because safe_load is not used for YAML.
This page as .md · .json · in your agent: get_signal("CVE-2024-23730")
GitHub Advisory Database, CC-BY 4.0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.