CVE-2026-58474

HIGH 8.8

whichllm < 0.5.16 Code Injection via run and snippet commands

CVSS Score

8.8

EPSS Score

0.0%

EPSS Percentile

0th

whichllm before 0.5.16 contains a code injection vulnerability in the run and snippet commands that allows a remote attacker who controls a HuggingFace repository to achieve arbitrary code execution by crafting a malicious GGUF filename containing double quotes or other special characters. The script generation function in cli.py interpolates HuggingFace-derived values, including GGUF variant filenames from the Hub API siblings rfilename field, directly into Python source code without escaping, allowing the crafted filename to break out of the generated string literal and execute injected code on the user's machine before any model download occurs.

CWE	CWE-94
Vendor	andyyyy64
Product	whichllm
Published	Aug 26, 2026
Last Updated	Aug 26, 2026

Stay Ahead of the Next One

Get instant alerts for andyyyy64 whichllm

Be the first to know when new high vulnerabilities affecting andyyyy64 whichllm are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Affected Versions

Andyyyy64 / whichllm

0 < 0.5.16

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/Andyyyy64/whichllm/releases/tag/v0.5.16 github.com: https://github.com/Andyyyy64/whichllm/pull/147 github.com: https://github.com/Andyyyy64/whichllm/commit/77e8dc9e8b45212c694d631d758623e17a00859e vulncheck.com: https://www.vulncheck.com/advisories/whichllm-code-injection-via-run-and-snippet-commands

Credits

hannibal-lee hayato1121