Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.7

LMDeploy may fetch internal data via redirected URLs

CVE-2026-63764 · published 3 months ago
Summary

Versions of LMDeploy up to 0.14.0 can be tricked into following a redirect from a user‑supplied image link to an internal address, such as a private network or cloud metadata service. This lets anyone on the internet cause the server to retrieve and possibly expose internal information. Upgrade to the latest LMDeploy release (post‑commit 03c3130) or apply the provided patch to stop the redirect validation issue.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
internlm lmdeploy <= 0.14.0
Original advisory text
LMDeploy Server-Side Request Forgery via HTTP Redirect Bypass
LMDeploy through 0.14.0, fixed in commit 03c3130, contains a server-side request forgery (SSRF) vulnerability in the _load_http_url function within the connection.py media handler, where the private-IP guard validates only the original URL without re-validating hosts after HTTP redirects. An unauthenticated attacker can submit a crafted image_url to the chat completions endpoint pointing to an attacker-controlled host that returns a redirect to a private IP or cloud-metadata endpoint, causing the server to follow the redirect and expose internal service content through the model pipeline.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
7.7 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-918Server-Side Request Forgery (SSRF)
Timeline
Published21 Jul 2026
Updated30 Oct 2026
First seen21 Jul 2026
Sources
CVE-2026-63764 · NVD
CVE-2026-63764 · MITRE
CVE-2026-63764 · OSV
Track software like this
Free during beta