Server-Side Request Forgery in LLaMA-Factory's OpenAI-Compatible API

CVE-2026-85673

What is CVE-2026-85673?

LLaMA-Factory's OpenAI-compatible API includes a vulnerability that permits unauthorized attackers to exploit a server-side request forgery (SSRF) flaw. This vulnerability arises in the multimodal media URL handler, where the check_ssrf_url function validates URLs only once. Unfortunately, the subsequent requests made by requests.get follow redirects and perform DNS re-resolution without re-validation. As a result, attackers can manipulate HTTP redirects or utilize DNS rebinding to gain access to internal addresses and potentially sensitive cloud metadata endpoints.

References