CVE-2026-63764
LMDeploy Server-Side Request Forgery via HTTP Redirect Bypass
CVSS Score
8.6
EPSS Score
0.3%
EPSS Percentile
20th
LMDeploy through 0.14.0, fixed in commit 03c3130, contains a server-side request forgery (SSRF) vulnerability in the _load_http_url function within the connection.py media handler, where the private-IP guard validates only the original URL without re-validating hosts after HTTP redirects. An unauthenticated attacker can submit a crafted image_url to the chat completions endpoint pointing to an attacker-controlled host that returns a redirect to a private IP or cloud-metadata endpoint, causing the server to follow the redirect and expose internal service content through the model pipeline.
| CWE | CWE-918 |
| Vendor | internlm |
| Product | lmdeploy |
| Published | Jul 21, 2026 |
| Last Updated | Jul 23, 2026 |
Stay Ahead of the Next One
Get instant alerts for internlm lmdeploy
Be the first to know when new high vulnerabilities affecting internlm lmdeploy are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Changed
Confidentiality
High
Integrity
None
Availability
None
Affected Versions
InternLM / lmdeploy
0 ≤ 0.14.0
References
github.com: https://github.com/InternLM/lmdeploy/issues/4761 github.com: https://github.com/InternLM/lmdeploy/pull/4734 github.com: https://github.com/InternLM/lmdeploy/commit/03c313006d17cc3feae86b633c44206a997c44db vulncheck.com: https://www.vulncheck.com/advisories/lmdeploy-server-side-request-forgery-via-http-redirect-bypass
Credits
George Chen