Downloads · 30 days
0
llama-cpp-ssrf-poc
anandppatil4383/llama-cpp-ssrf-poc
llama-cpp-ssrf-poc is a machine learning model from anandppatil4383. Use it for the machine learning task on the model card, and read the license before you ship it in a product.
A Server-Side Request Forgery (SSRF) exists in the multimodal image fetching logic of llama-server. An attacker can force the server to make outbound HTTP requests to internal resources or cloud metadata endpoints.
Access
Public
Updated Feb 4, 2026
Repo size
136 MB
Likes
0
Public
Repo makeup
Click a slice to open those files.
.mp4136 MB · 100%
At a glance
- Access
- Public
- Created
- Feb 4, 2026
- Updated
- Feb 4, 2026
- SHA
- 3a597e6d
Model card
From the Hugging Face model README
PoC: Blind SSRF in llama.cpp Server
Description
A Server-Side Request Forgery (SSRF) exists in the multimodal image fetching logic of llama-server. An attacker can force the server to make outbound HTTP requests to internal resources or cloud metadata endpoints.
Reproduction Steps
- Start listener:
python3 -m http.server 9000 - Run server:
./bin/llama-server -m qwen2-vl-2b-q4_k.gguf --mmproj mmproj-qwen2-vl-2b.gguf - Execute PoC:
bash poc_exploit.sh
Impact
High/Critical. Bypasses network firewalls and allows exfiltration of AWS/GCP/Azure instance metadata credentials (IMDS).
- Created
- Feb 4, 2026
- Updated
- Feb 4, 2026