Executive brief
LLaMA Factory's Chat API Contains Critical SSRF and LFI Vulnerabilities
Affected products
- PyPI llamafactory
Junglewise Threat Intelligence
CVE-2025-61784: PYSEC-2026-1573 - LLaMA Factory's Chat API Contains Critical SSRF and LFI Vulnerabilities
CVE-2025-61784 · Severity: low · CVSS 3.1 · Published 2026-07-07
Technologies: llamafactory (PyPI). Vendors: PyPI.