CVE-2026-85673

HIGH 7.5

LLaMA-Factory SSRF Guard Bypass via Redirect and DNS Rebinding

CVSS Score

7.5

EPSS Score

0.0%

EPSS Percentile

0th

LLaMA-Factory contains a server-side request forgery vulnerability in the OpenAI-compatible API multimodal media URL handler that allows unauthenticated attackers to bypass SSRF validation. The check_ssrf_url guard validates URLs once but requests.get follows redirects and re-resolves DNS without re-validation, enabling attackers to use HTTP redirects or DNS rebinding to access internal addresses and cloud metadata endpoints.

CWE	CWE-918
Vendor	hiyouga
Product	llamafactory
Published	Sep 4, 2026
Last Updated	Sep 4, 2026

Stay Ahead of the Next One

Get instant alerts for hiyouga llamafactory

Be the first to know when new high vulnerabilities affecting hiyouga llamafactory are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Affected Versions

hiyouga / LlamaFactory

0 ≤ 0.9.5

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/hiyouga/LlamaFactory/issues/10646 github.com: https://github.com/hiyouga/LlamaFactory github.com: https://github.com/hiyouga/LlamaFactory/blob/v0.9.5/src/llamafactory/api/chat.py github.com: https://github.com/hiyouga/LlamaFactory/blob/v0.9.5/src/llamafactory/api/common.py vulncheck.com: https://www.vulncheck.com/advisories/llama-factory-ssrf-guard-bypass-via-redirect-and-dns-rebinding

Credits

George Chen