CVE-2026-63764

CRITICAL 9.3

lmdeploy Server-Side Request Forgery via HTTP Redirect Bypass of Private-IP Guard in Vision Image Fetch

CVSS Score

9.3

EPSS Score

0.0%

EPSS Percentile

0th

lmdeploy's OpenAI-compatible API server contains a server-side request forgery vulnerability that allows unauthenticated attackers to access internal services and cloud metadata endpoints by supplying a crafted image_url that redirects to internal targets. Attackers can send a POST request to the chat completions endpoint with an image_url pointing to an attacker-controlled server that responds with an HTTP 302 redirect to internal addresses such as loopback or instance-metadata endpoints, bypassing the initial URL safety check because redirects are followed without re-validating each hop through the safety guard.

CWE	CWE-918
Vendor	internlm
Product	lmdeploy
Published	Jul 21, 2026

Stay Ahead of the Next One

Get instant alerts for internlm lmdeploy

Be the first to know when new critical vulnerabilities affecting internlm lmdeploy are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

Low

Availability

None

Affected Versions

InternLM / lmdeploy

All versions affected

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/InternLM/lmdeploy/issues/4761 github.com: https://github.com/InternLM/lmdeploy vulncheck.com: https://www.vulncheck.com/advisories/lmdeploy-server-side-request-forgery-via-http-redirect-bypass-of-private-ip-guard-in-vision-image-fetch

Credits

🔍 George Chen