Skip to content
OpenAdvisories

Product · InternLM

lmdeploy

15 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-33626 Public exploit EPSS 45%

    LMDeploy Vulnerable to Server-Side Request Forgery (SSRF) via Vision-Language Image Loading

    LMDeploy is a toolkit for compressing, deploying, and serving large language models. Versions prior to 0.12.3 have a Server-Side Request Forgery (SSRF) vulnerability in LMDeploy's vision-language module. The `load_image()` function in `lmdeploy/vl/utils.py` f…

    InternLM lmdeploy lmdeploy PyPI