CVE-2026-63764: Internlm Lmdeploy

High severity, CVSS 8.6. EPSS: 0.5% chance of exploitation in the next 30 days.

LMDeploy through 0.14.0, fixed in commit 03c3130, contains a server-side request forgery (SSRF) vulnerability in the _load_http_url function within the connection.py media handler, where the private-IP guard validates only the original URL without re-validating hosts after HTTP redirects. An unauthenticated attacker can submit a crafted image_url to the chat completions endpoint pointing to an attacker-controlled host that returns a redirect to a private IP or cloud-metadata endpoint, causing the server to follow the redirect and expose internal service content through the model pipeline.

Affected products

• Internlm Lmdeploy: up to and including 0.14.0

Published 2026-07-21. Last modified 2026-09-17.