Ò»¸öAPIÇëÇóÈôóÄ£×ÓЧÀÍ̱»¾£¡¿´MAFÔõÑùÆÆ¾ÖLLM¹©Ó¦Á´Îó²îΣ» £»£»£»ú

Ðû²¼Ê±¼ä 2025-12-18

ǰÑÔ£º

Ëæ×Å´óÄ£×Ó³ÉΪÆóÒµÊý×Ö»¯×ªÐ͵ÄÒªº¦×é¼þ£¬£¬ £¬ £¬£¬£¬Æä¹©Ó¦Á´Çå¾²ÎÊÌâÈÕÒæÍ¹ÏÔ¡£¡£¡£½üÆÚ£¬£¬ £¬ £¬£¬£¬Ö÷Á÷´óÄ£×ÓÍÆÀíÒýÇævLLM±»ÆØ³ö¸ßΣԶ³Ì´úÂëÖ´ÐÐÎó²î£¨CVE-2025-62164£©£¬£¬ £¬ £¬£¬£¬¹¥»÷Õß½öÐè·¢ËÍÒ»¸ö¶ñÒâ½á¹¹µÄAPIÇëÇ󣬣¬ £¬ £¬£¬£¬¼´¿Éµ¼ÖÂЧÀÍÍ߽⡣¡£¡£ÕâÔÙ´ÎÕ¹ÏÖÁË´óÄ£×Ó¹©Ó¦Á´µÄųÈõÐÔ¡£¡£¡£±¾ÎĽ«Í¨¹ý¸ÃÎó²îÆÊÎö´óÄ£×Ó¹©Ó¦Á´µÄÇå¾²ÌôÕ½£¬£¬ £¬ £¬£¬£¬²¢ÏÈÈÝc7c7ÓéÀÖÆ½Ì¨MAF´óÄ£×ÓÓ¦Ó÷À»ðǽµÄ·À»¤Ë¼Ð÷¡£¡£¡£


vLLMÊÇÄ¿½ñÒµ½çÆÕ±éÓ¦ÓõĴóÄ£×ÓÍÆÀíÓëЧÀÍÒýÇæ£¬£¬ £¬ £¬£¬£¬ÎªÖÚ¶àAIÓ¦ÓÃÌṩµ×²ãÊÖÒÕÖ§³Ö¡£¡£¡£×÷Ϊ½¹µã»ù´¡ÉèÊ©£¬£¬ £¬ £¬£¬£¬Ò»µ©·ºÆðÇå¾²Îó²î£¬£¬ £¬ £¬£¬£¬±ã¿ÉÄÜ´øÀ´ÑÏÖØÐ§¹û¡£¡£¡£´Ë´ÎÅû¶µÄCVE-2025-62164Îó²î¼´ÊôÓÚÄÚ´æËð»µÀàÐÍ£¬£¬ £¬ £¬£¬£¬Ö±½ÓÍþвµ½ÍйÜvLLMµÄЧÀÍÆ÷Çå¾²¡£¡£¡£


ͨ¹ýÄæÏòÆÊÎövLLMÔ´Â룬£¬ £¬ £¬£¬£¬c7c7ÓéÀÖÆ½Ì¨»¹Ô­Á˸ÃÎó²îµÄÍêÕû¹¥»÷Á´Â·£º¹¥»÷ÕßÏò/v1/completions½Ó¿Ú·¢ËÍÈ«ÐĽṹµÄ¶ñÒâÇëÇ󣬣¬ £¬ £¬£¬£¬ÔÚHTTP BodyÖÐÖ²Èë´øÓÐΣº¦ prompt_embeds£¨ÌáÐÑǶÈ룩²ÎÊý£» £»£»£»vLLMºó¶ËÎüÊոòÎÊýºó£¬£¬ £¬ £¬£¬£¬»áŲÓÃtorch.load()º¯Êý¼ÓÔØÐòÁл¯µÄÕÅÁ¿Êý¾Ý£» £»£»£»ÓÉÓڵײãÒÀÀµµÄPyTorch 2.8.0°æ±¾Ä¬ÈϽûÓÃÁËÏ£º±ÕÅÁ¿µÄÍêÕûÐÔ¼ì²é£¬£¬ £¬ £¬£¬£¬¶ñÒâ½á¹¹µÄÐòÁл¯ÕÅÁ¿¿ÉÇáËÉÈÆ¹ý½çÏß¼ì²é£» £»£»£»µ±³ÌÐòŲÓÃto_dense()ÒªÁìת»»ÕÅÁ¿ÃûÌÃʱ£¬£¬ £¬ £¬£¬£¬»á´¥·¢Ô½½çÄÚ´æÐ´È룬£¬ £¬ £¬£¬£¬×îÖÕµ¼ÖÂvLLMÓ¦ÓóÌÐòÍß½âÍ˳ö£¬£¬ £¬ £¬£¬£¬Òý·¢¾Ü¾øÐ§À͹¥»÷¡£¡£¡£


ͼƬ1.png

¶ñÒâÇëÇóµ¼ÖÂvLLMÄÚ´æÍß½â


¸ÃÎó²î·´Ó¦ÁË´óÄ£×Ó¹©Ó¦Á´Çå¾²µÄÆÕ±éÎÊÌâ¡£¡£¡£¾Ýͳ¼Æ£¬£¬ £¬ £¬£¬£¬´óÄ£×ÓϵͳÖÐÔ¼70%µÄ´úÂëÀ´×ÔÍⲿ¹©Ó¦Á´£¬£¬ £¬ £¬£¬£¬°üÀ¨¿ªÔ´×é¼þ¡¢µÚÈý·½¿âºÍԤѵÁ·Ä£×Ó¡£¡£¡£¹¥»÷Õß¿Éͨ¹ýÎÛȾÊý¾Ý¡¢¸Ä¶¯ÒÀÀµ»òÖ²ÈëºóÃŵȷ½·¨£¬£¬ £¬ £¬£¬£¬Ñع©Ó¦Á´ÉøÍ¸ÖÁ½¹µãϵͳ£¬£¬ £¬ £¬£¬£¬Íþв¹á´®Êý¾Ý¡¢·Ö·¢¡¢ÑµÁ·¡¢ÍÆÀí¼°Ó¦ÓÃÈ«Á´Â·£º


? ÉÏÓΣ¨Êý¾Ý²ã£©£ºÃæÁÙÍøÒ³Êý¾ÝץȡͶ¶¾¡¢ÑµÁ·Êý¾Ý¼¯ÎÛȾ¡¢Òþ˽й¶µÈΣº¦¡£¡£¡£

ÖÐÓΣ¨Ä£×Ó/¿ò¼Ü²ã£©£º ÃæÁÙ¿ª·¢°üͶ¶¾¡¢·´ÐòÁл¯¡¢Ä£×ÓºóÃŵÈΣº¦¡£¡£¡£

ÏÂÓΣ¨Ó¦Óò㣩£ºÃæÁÙÏÂÁîÖ´ÐС¢SSRF¡¢Ô½È¨»á¼û¡¢É³ÏäÌÓÒݵÈΣº¦¡£¡£¡£


c7c7ÓéÀÖÆ½Ì¨ÏÖÔÚÒÑÕë¶Ô40+LLM¹©Ó¦Á´¸ßΣÎó²î¿ªÕ¹ÆÊÎöÑо¿£¬£¬ £¬ £¬£¬£¬ÁýÕÖLLMÓ¦Óÿò¼Ü£¨ÈçDifyµÄSSRFÎó²î£©¡¢»ù´¡Æ½Ì¨£¨ÈçollamaµÄRCEÎó²î£©¡¢´úÂëIDE¼°ÖÇÄÜÌ壨ÈçsmolagentsÏà¹ØÎó²î£©µÈ¶àÀೡ¾°¡£¡£¡£ÕâЩÎó²îÂþÑÜÓÚÍÆÀíÒýÇæ¡¢Ó¦Óÿò¼Ü¡¢APIÍø¹Ø¡¢ÖÇÄÜÌåÆ½Ì¨µÈÒªº¦×é¼þ£¬£¬ £¬ £¬£¬£¬´Óµ×²ãvLLMÍÆÀíЧÀÍ£¬£¬ £¬ £¬£¬£¬µ½ÉϲãDify¡¢LangflowÓ¦Óÿò¼Ü£¬£¬ £¬ £¬£¬£¬ÔÙµ½ÖÖÖÖ¿ª·¢¹¤¾ßºÍÖÇÄÜÌåÆ½Ì¨£¬£¬ £¬ £¬£¬£¬¾ù¿ÉÄܳÉΪ¹¥»÷ÕßµÄÄ¿µÄ¡£¡£¡£¸üÖµµÃСÐĵÄÊÇ£¬£¬ £¬ £¬£¬£¬ÕâЩ×é¼þÍùÍù±£´æÏ໥ŲÓᢲã²ãǶÌ׵ĹØÏµ£¬£¬ £¬ £¬£¬£¬Ò»¸ö¾Ö²¿Îó²î¿ÉÄÜÑØÅ²ÓÃÁ´´«µ¼£¬£¬ £¬ £¬£¬£¬×îÖÕµ¼ÖÂÕû¸öЧÀÍϵͳ±»»÷´©¡£¡£¡£


MAFÆÆ¾ÖLLM¹©Ó¦Á´Çå¾²

´Óµ¥µã·ÀÓùµ½È«ÉúÃüÖÜÆÚ·À»¤


c7c7ÓéÀÖÆ½Ì¨MAF´óÄ£×ÓÓ¦Ó÷À»ðǽ°²ÅÅÓÚ´óÄ£×ÓЧÀÍ»òÖÇÄÜÌåЧÀÍÈë¿Ú£¬£¬ £¬ £¬£¬£¬ËùÓÐÁ÷ÏòÍÆÀíÒýÇæ¡¢Ó¦Óÿò¼Ü¡¢API½Ó¿Ú¡¢ÖÇÄÜÌåÆ½Ì¨µÄÇëÇó¾ùÐè¾­ÓÉMAF¼ì²â¡£¡£¡£¸Ã°²Åżܹ¹Ê¹MAFÄܹ»ÔÚͳһλÖÃÁýÕÖvLLM¡¢Dify¡¢ollama¡¢LangflowµÈÖÖÖÖLLM×é¼þ£¬£¬ £¬ £¬£¬£¬ÊµÏÖ¡°Ò»µã°²ÅÅ¡¢È«Á´·À»¤¡±¡£¡£¡£


Õë¶ÔCVE-2025-62164Îó²î£¬£¬ £¬ £¬£¬£¬c7c7ÓéÀÖÆ½Ì¨MAFͨ¹ý¶Ô´óÄ£×ÓЧÀͶԻ°½Ó¿Ú¡°/v1/completions¡±µÄÇëÇóÊý¾Ý¾ÙÐÐÕë¶ÔÐÔ¼ì²â£¬£¬ £¬ £¬£¬£¬¿ÉÓÐÓÃ×èµ²¶ñÒâ½á¹¹µÄprompt_embeds²ÎÊý£¬£¬ £¬ £¬£¬£¬Ìá·À¸ÃÎó²îÒý·¢µÄvLLMЧÀÍÍß½âÎÊÌâ¡£¡£¡£


ͼƬ2.jpg

MAF¾«×¼×èµ²vLLM RCEÎó²î£¨CVE-2025-62164£©


ͨ¹ýÉî¶ÈÆÊÎöLangflow¡¢OllamaµÈ¶à¸ö¸ßΣ¹©Ó¦Á´Îó²î£¬£¬ £¬ £¬£¬£¬c7c7ÓéÀÖÆ½Ì¨·¢Ã÷Ö»¹ÜAI¹©Ó¦Á´ÖÐÏÂÓοò¼ÜºÍÓ¦Óõü´úËÙÂʽϿ죬£¬ £¬ £¬£¬£¬µ«ÆäÇ徲Σº¦ÊµÖÊÈÔÊôÓڹŰåWebÇå¾²ÎÊÌâÁìÓò£¬£¬ £¬ £¬£¬£¬ÆäÖÐÔ¶³Ì´úÂëÖ´ÐС¢·´ÐòÁл¯¡¢í§ÒâÎļþ¶ÁÈ¡ÊÇ·ºÆðƵÂÊ×î¸ßµÄÎó²îÀàÐÍ¡£¡£¡£ÏêϸÈçϱíËùʾ£º


ͼƬ3.png


»ùÓڴ˶´²ì£¬£¬ £¬ £¬£¬£¬c7c7ÓéÀÖÆ½Ì¨MAF²»µ«Ò»Á¬¼á³Ö×ŶÔÐÐÒµÈÈÃÅÎó²îµÄÃôÈñÐá¾õÓë¿ìËÙÏìÓ¦ÄÜÁ¦£¬£¬ £¬ £¬£¬£¬¸üÖÂÁ¦ÓÚ¹¹½¨Ò»Ì×»ùÓÚ¹¥»÷Ô­ÀíµÄ¡°Ëã·¨ÃâÒß¡±ÏµÍ³¡£¡£¡£¸Ãϵͳ¼ÌÐøÁËc7c7ÓéÀÖÆ½Ì¨WAFÔڹŰåÇå¾²ÁìÓòµÄ³ÉÊì¼ì²âÄÜÁ¦£¬£¬ £¬ £¬£¬£¬¶ÔÏÂÁî×¢Èë¡¢´úÂëÖ´ÐС¢SSRFµÈÍþв¾ß±¸ÍêÉÆµÄ·À»¤Ëã·¨£¬£¬ £¬ £¬£¬£¬²¢Õë¶ÔLLM³¡¾°Íê³ÉÁËÁ÷Á¿ÌØÕ÷ÊÊÅä¡£¡£¡£Òò´Ë£¬£¬ £¬ £¬£¬£¬ÎÞÂÛÊÇvLLMµÄ·´ÐòÁл¯Îó²î£¬£¬ £¬ £¬£¬£¬ÕÕ¾ÉDifyµÄSSRF¹¥»÷£¬£¬ £¬ £¬£¬£¬Ö»Òª¹¥»÷ÐÐΪ´¥·¢Á˵ײã¶ñÒâÌØÕ÷£¬£¬ £¬ £¬£¬£¬×ÝÈ»ÔÚ0-dayÎó²î±¬·¢µÄ´°¿ÚÆÚ£¬£¬ £¬ £¬£¬£¬MAFÒ²ÄÜʵÏÖ׼ȷʶ±ðÓëÓÐÓÃ×èµ²¡£¡£¡£


AIʱ´úµÄ´óÄ£×ÓÇå¾²·À»¤£¬£¬ £¬ £¬£¬£¬ÒÑÑÓÉìÖÁ¹©Ó¦Á´µÄÿһ¸ö»·½Ú£¬£¬ £¬ £¬£¬£¬vLLM¸ßΣÎó²îµÄ±¬·¢Åú×¢£¬£¬ £¬ £¬£¬£¬´óÄ£×ÓÇå¾²·À»¤±ØÐèÍ»ÆÆ¡°µ¥µã·ÀÓù¡±¾ÖÏÞ£¬£¬ £¬ £¬£¬£¬ÁýÕÖLLMÈ«ÉúÃüÖÜÆÚ½×¶Î¡£¡£¡£c7c7ÓéÀÖÆ½Ì¨MAF´óÄ£×ÓÓ¦Ó÷À»ðǽÒÀ¸½¡°Ò»µã°²ÅÅ¡¢È«Á´·À»¤¡±µÄ¼Ü¹¹ÓÅÊÆ£¬£¬ £¬ £¬£¬£¬ÒÔ¼°»ùÓÚ¹¥»÷Ô­ÀíµÄËã·¨·À»¤ÄÜÁ¦£¬£¬ £¬ £¬£¬£¬ÆÆ½âLLM¹©Ó¦Á´Çå¾²ÄÑÌ⣬£¬ £¬ £¬£¬£¬È·±£Ã¿Ò»¸öÍⲿ×é¼þ¶¼¾­ÓÉÑÏ¿áÇ徲УÑ飬£¬ £¬ £¬£¬£¬ÎªÆóÒµÖÇÄܽ»»¥Ìṩ¼áʵµÄÇå¾²°ü¹Ü¡£¡£¡£