CVE-2026-63764
highpriority · track · 34EPSS 0.005 · 43 %ileEUUSEPSS · scored 2026-10-27
LMDeploy through 0.14.0, fixed in commit 03c3130, contains a server-side request forgery (SSRF) vulnerability in the _load_http_url function within the connection.py media handler, where the private-IP guard validates only the original URL without re-validating hosts after HTTP redirects. An unauthenticated attacker can submit a crafted image_url to the chat completions endpoint pointing to an attacker-controlled host that returns a redirect to a private IP or cloud-metadata endpoint, causing the server to follow the redirect and expose internal service content through the model pipeline.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 4.4–8.6
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (2)
Products and version ranges known to be affected.
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (12)
External citations — patches, advisories, analysis.
- https://github.com/InternLM/lmdeploycnnvd
- https://github.com/InternLM/lmdeploy/issues/4761cnnvd
- https://github.com/InternLM/lmdeploy/releasesPatchcnnvd
- https://www.vulncheck.com/advisories/lmdeploy-server-side-request-forgery-via-http-redirect-bypass-of-private-ip-guard-in-vision-image-fetchcnnvd
- https://github.com/InternLM/lmdeploy/commit/03c313006d17cc3feae86b633c44206a997c44dbenisa_euvd
- https://github.com/InternLM/lmdeploy/issues/4761enisa_euvd
- https://github.com/InternLM/lmdeploy/pull/4734enisa_euvd
- https://www.vulncheck.com/advisories/lmdeploy-server-side-request-forgery-via-http-redirect-bypassenisa_euvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan