{"cvss":7.5,"datePublished":"2026-04-22T00:00:00Z","dateUpdated":"2026-04-22T00:00:00Z","description":"LMDeploy is a toolkit for compressing, deploying, and serving large language models. Versions prior to 0.12.3 have a Server-Side Request Forgery (SSRF) vulnerability in LMDeploy's vision-language module. The `load_image()` function in `lmdeploy/vl/utils.py` fetches arbitrary URLs without validating internal/private IP addresses, allowing attackers to access cloud metadata services, internal networks, and sensitive resources. Version 0.12.3 patches the issue.","dueDate":"","id":"CVE-2026-33626","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"lmdeploy","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"internlm lmdeploy Server-Side Request Forgery","vendor":"internlm"}