What is CVE-2026-33626?
LMDeploy is a toolkit for compressing, deploying, and serving large language models. Versions prior to 0.12.3 have a Server-Side Request Forgery (SSRF) vulnerability in LMDeploy's vision-language module. The `load_image()` function in `lmdeploy/vl/utils.py` fetches arbitrary URLs without validating internal/private IP addresses, allowing attackers to access cloud metadata services, internal networks, and sensitive resources. Version 0.12.3 patches the issue.
Timeline
- 2026-04-20Published to the U.S. National Vulnerability Database (NVD)
- 2026-06-17NVD record last updated
Affected product
Internlm Lmdeploy
Remediation Steps
- Update LMDeploy to patched version immediately via pip or package manager
- Audit server logs for SSRF attack attempts targeting internal resources
- Implement network-level restrictions on outbound requests from LMDeploy instances
- Review and restrict IAM permissions for LMDeploy service accounts
- Deploy Web Application Firewall rules to block suspicious SSRF patterns
References
- https://github.com/InternLM/lmdeploy/security/advisories/GHSA-6w67-hwm5-92mq
- https://github.com/InternLM/lmdeploy/commit/71d64a339edb901e9005358e0633fbbab367d626
- https://github.com/InternLM/lmdeploy/releases
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33626
- https://nvd.nist.gov/vuln/detail/CVE-2026-33626
Referenced in our briefings & reports
- Vulnerability Priority Report – Week 4 of April 2026 (April 27 – May 3)
Browse all tracked CVEs in the defend.network CVE database →
🤖 This CVE page is generated by defend.network from NVD, CISA KEV, EPSS, and our verified daily briefings. Severity and exploitation data come from official sources; always verify remediation steps against the official vendor advisory before acting in production.