LLaMA-Factory (Unspecified Version) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/llama-factory-unspecified-version/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioFri, 04 Sep 2026 15:30:57 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgCVE-2026-85673: SSRF Vulnerability in LLaMA-Factory OpenAI-Compatible APIhttps://feed.craftedsignal.io/briefs/2026-09-llama-factory-ssrf/Fri, 04 Sep 2026 15:30:57 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-09-llama-factory-ssrf/LLaMA-Factory is vulnerable to server-side request forgery (SSRF) due to improper validation of multimodal media URLs in its OpenAI-compatible API, allowing unauthenticated attackers to access internal network resources.LLaMA-Factory contains a server-side request forgery (SSRF) vulnerability within its OpenAI-compatible API's multimodal media URL handler (CVE-2026-85673). The issue stems from the 'check_ssrf_url' guard, which performs a one-time validation of the user-supplied URL. However, the application uses 'requests.get' to fetch these URLs, which follows HTTP redirects and performs subsequent DNS resolutions without re-validating the final, resolved destination. This flaw permits unauthenticated attackers to bypass security controls using techniques such as HTTP redirection or DNS rebinding. By exploiting this, attackers can force the LLaMA-Factory instance to perform requests to sensitive internal network addresses or cloud metadata service endpoints, potentially leading to unauthorized data access or internal reconnaissance.

Impact

Successful exploitation of this vulnerability allows unauthenticated attackers to interact with internal network services that are otherwise inaccessible from the public internet. This includes access to cloud metadata services (e.g., 169.254.169.254), internal management interfaces, and other microservices within the hosting environment. The potential impact involves unauthorized data exfiltration, service manipulation, or leveraging the application as a proxy for lateral movement within the infrastructure.

Recommendation

  • Monitor application logs for anomalous outbound HTTP requests originating from the LLaMA-Factory server, particularly those targeting internal IP ranges or cloud metadata endpoints.
  • Implement network-level egress filtering to prevent the LLaMA-Factory application from reaching sensitive internal segments or the cloud provider metadata service.
  • Review vendor documentation for patches addressing CVE-2026-85673 and update the LLaMA-Factory deployment to a non-vulnerable version as soon as one is released.
]]>highadvisory