CVE-2026-85673

Name of the Vulnerable Software and Affected Versions LLaMA-Factory (affected versions not specified)

Description A server-side request forgery (SSRF) issue exists in the OpenAI-compatible API multimodal media URL handler. The check ssrf url function validates URLs only once; however, the requests.get() function follows redirects and re-resolves DNS without performing subsequent validations. This allows unauthenticated attackers to use HTTP redirects or DNS rebinding to access internal network addresses and cloud metadata endpoints.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.