CVE-2026-33626 Details
Description
LMDeploy is a toolkit for compressing, deploying, and serving large language models. Versions prior to 0.12.3 have a Server-Side Request Forgery (SSRF) vulnerability in LMDeploy's vision-language module. The `load_image()` function in `lmdeploy/vl/utils.py` fetches arbitrary URLs without validating internal/private IP addresses, allowing attackers to access cloud metadata services, internal networks, and sensitive resources. Version 0.12.3 patches the issue.
A Server-Side Request Forgery (SSRF) vulnerability exists in LMDeploy versions prior to 0.12.3, specifically within the vision-language module. The vulnerability arises because the 'load_image()' function in 'lmdeploy/vl/utils.py' retrieves arbitrary URLs without validating internal or private IP addresses. This oversight allows attackers to access cloud metadata services, internal networks, and sensitive resources. The issue has been patched in version 0.12.3.
Users can upgrade to LMDeploy version 0.12.3 or later, where this vulnerability has been patched.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Apr 21, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/InternLM/lmdeploy/security/advisories/GHSA-6w67-hwm5-92mq | CISA-ADP | ExploitMitigationVendor Advisory |
| https://github.com/InternLM/lmdeploy/commit/71d64a339edb901e9005358e0633fbbab367d626 | [email protected] | Patch |
| https://github.com/InternLM/lmdeploy/pull/4447 | [email protected] | Issue TrackingPatch |
| https://github.com/InternLM/lmdeploy/releases/tag/v0.12.3 | [email protected] | Release Notes |
| https://github.com/InternLM/lmdeploy/security/advisories/GHSA-6w67-hwm5-92mq | [email protected] | ExploitMitigationVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-918 | Server-Side Request Forgery (SSRF) | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| internlm lmdeploy | < 0.12.3 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Apr 23, 2026 | Initial Analysis | [email protected] |
| Apr 21, 2026 | CVE Modified | CISA-ADP |
| Apr 20, 2026 | New CVE Received | [email protected] |