hiyouga LlamaFactory

• CVE-2026-85673 High 7.5 LLaMA-Factory SSRF Guard Bypass via Redirect and DNS Rebinding 0.5%
• CVE-2026-58116 Critical 9.8 LLaMA-Factory 0.9.5 Remote Code Execution via WebUI Model Path 0.9%