CVE-2026-85666: OGX (formerly Llama Stack, affected at commit fbe8e0f) contains an unauthenticated server-side request forgery vulnerabi

OGX (formerly Llama Stack) has a vulnerability where its OpenAI-compatible API endpoint accepts a server_url parameter without checking if it points to safe locations, allowing unauthenticated attackers to make the server connect to arbitrary internal addresses (like cloud metadata endpoints that contain sensitive credentials) and send attacker-controlled data to those locations. This SSRF (server-side request forgery, where an attacker tricks a server into making requests the attacker shouldn't be able to make directly) happens because the validation function used elsewhere is not applied to this specific parameter.