CVE-2026-108760: LlamaFarm through 0.0.34 Unauthenticated API Exposed on All Interfaces
LlamaFarm through 0.0.34 contains an insecure default configuration that binds its unauthenticated FastAPI server to 0.0.0.0 on port 14345, while the lf CLI silently discards HOST overrides. Network-adjacent attackers can call the project and dataset management API to read stored provider API keys, modify projects, trigger ingestion, and irreversibly delete projects.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
Network-adjacent attackers that can reach TCP port 14345 on a LlamaFarm host can exploit the unauthenticated API. No account or prior privileges are required.
Are default deployments affected?
Yes. Through version 0.0.34, the default configuration binds the FastAPI server to 0.0.0.0, exposing it on all network interfaces.
Can setting HOST through the lf CLI limit exposure?
No. The lf CLI silently discards HOST overrides, so relying on that setting does not change the server bind address.
What can an unauthenticated attacker do through the exposed API?
They can read stored provider API keys, modify projects, trigger ingestion, and irreversibly delete projects and datasets.
What should be done if patching cannot happen immediately?
Restrict network access to port 14345 so untrusted network-adjacent systems cannot reach the API.