CVE-2026-123818
LMDeploy URL parser disagreement permits SSRF filter bypass
LMDeploy is a toolkit for compressing, deploying, and serving large language models. From 0.12.3 until 0.15.0, _is_safe_url validates remote media URLs with urlparse while requests.Session().get interprets backslashes differently when sending the request. An attacker can provide a URL whose validation hostname appears globally routable but whose request destination resolves to an internal host, bypassing non-global address checks. Applications that accept attacker-controlled remote media URLs can therefore be induced to access internal HTTP services and expose data available from those services. This issue is fixed in version 0.15.0.
| CWE | CWE-918 |
| Vendor | internlm |
| Product | lmdeploy |
| Published | Nov 9, 2026 |
Get instant alerts for internlm lmdeploy
Be the first to know when new high vulnerabilities affecting internlm lmdeploy are published — delivered to Slack, Telegram or Discord.
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N