Description
LMDeploy is a toolkit for compressing, deploying, and serving large language models. Versions prior to 0.12.3 have a Server-Side Request Forgery (SSRF) vulnerability in LMDeploy's vision-language module. The `load_image()` function in `lmdeploy/vl/utils.py` fetches arbitrary URLs without validating internal/private IP addresses, allowing attackers to access cloud metadata services, internal networks, and sensitive resources. Version 0.12.3 patches the issue.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| InternLM | lmdeploy | < 0.12.3 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 1 repository
-
rootdirective-sec/CVE-2026-33626-Lab ★ 0 · May 13, 2026
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- LMDeploy - Server-Side Request Forgery http/cves/2026/CVE-2026-33626.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | lmdeploy | <= 0.12.2 | — | GHSA-6w67-hwm5-92mq |
Advisories 1
- WID-SEC-2026-1228 Mozilla Thunderbird, Firefox ESR und Firefox: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 12, 2026