Threat database

LlamaFarm versions up to 0.0.34 have an insecure default configuration where the unauthenticated FastAPI server binds to 0.0.0.0 on port 14345. The command-line interface (CLI) does not allow overriding the host, resulting in exposure to network-adjacent attackers. These attackers can access the project and dataset management API to read stored provider API keys, modify projects, trigger ingestion processes, and irreversibly delete projects.