HIGH
LLaMA-Factory SSRF Guard Bypass via Redirect and DNS Rebinding
Published Sep 4, 2026
8.7
HIGHCVSS 4.0
EPSS 0.51%
Description
LLaMA-Factory contains a server-side request forgery vulnerability in the OpenAI-compatible API multimodal media URL handler that allows unauthenticated attackers to bypass SSRF validation. The check_ssrf_url guard validates URLs once but requests.get follows redirects and re-resolves DNS without re-validation, enabling attackers to use HTTP redirects or DNS rebinding to access internal addresses and cloud metadata endpoints.
Affected products
-
- Version 0StatusaffectedConstraints<=0.9.5
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Hiyouga | LlamaFactory | unaffected |
|
No data.
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (6)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-71129 Advisory
- https://github.com/hiyouga/LlamaFactory product
- https://github.com/hiyouga/LlamaFactory/blob/v0.9.5/src/llamafactory/api/chat.py technical-description
- https://github.com/hiyouga/LlamaFactory/blob/v0.9.5/src/llamafactory/api/common.py technical-description
- https://github.com/hiyouga/LlamaFactory/issues/10646 exploitissue-tracking
- https://www.vulncheck.com/advisories/llama-factory-ssrf-guard-bypass-via-redirect-and-dns-rebinding third-party-advisory
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-71129 | Advisory | |
| https://github.com/hiyouga/LlamaFactory | product | |
| https://github.com/hiyouga/LlamaFactory/blob/v0.9.5/src/llamafactory/api/chat.py | technical-description | |
| https://github.com/hiyouga/LlamaFactory/blob/v0.9.5/src/llamafactory/api/common.py | technical-description | |
| https://github.com/hiyouga/LlamaFactory/issues/10646 | exploitissue-tracking | |
| https://www.vulncheck.com/advisories/llama-factory-ssrf-guard-bypass-via-redirect-and-dns-rebinding | third-party-advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner VulnCheck
Published Sep 4, 2026
Updated Sep 4, 2026
Reserved Sep 4, 2026
Link CVE-2026-85673
CISA Vulnrichment
Updated Sep 4, 2026
ENISA EUVD
EUVD-2026-71129 Assigner VulnCheck
Published Sep 4, 2026
Updated Sep 4, 2026
Exploited since n/a
Link EUVD-2026-71129