CyberRota Analysis
AI-GeneratedThe vulnerability exists in the OpenAI-compatible API multimodal media URL handler of LLaMA-Factory, allowing unauthenticated attackers to exploit server-side request forgery (SSRF) by bypassing URL validation. This flaw can enable attackers to access internal network addresses and cloud metadata endpoints through HTTP redirects or DNS rebinding, potentially leading to unauthorized data exposure or system compromise. Organizations using LLaMA-Factory should prioritize remediation to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
LLaMA-Factory contains a server-side request forgery vulnerability in the OpenAI-compatible API multimodal media URL handler that allows unauthenticated attackers to bypass SSRF validation. The check_ssrf_url guard validates URLs once but requests.get follows redirects and re-resolves DNS without re-validation, enabling attackers to use HTTP redirects or DNS rebinding to access internal addresses and cloud metadata endpoints.