SecBoard
Zurück zur CVE-Übersicht

CVE-2026-33626

HIGH(7.5)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Risk Signal Score32/100 — MITTEL
  • CVSS 7.5 — Hoch
  • EPSS 45%

Erwähnungen (letzte 60 Tage)

Artikel

EPSS-Score

45.3%

Exploit-Wahrscheinlichkeit (30 Tage)

CVSS Score

7.5

Technische Schwere

Beschreibung

LMDeploy is a toolkit for compressing, deploying, and serving large language models. Versions prior to 0.12.3 have a Server-Side Request Forgery (SSRF) vulnerability in LMDeploy's vision-language module. The `load_image()` function in `lmdeploy/vl/utils.py` fetches arbitrary URLs without validating internal/private IP addresses, allowing attackers to access cloud metadata services, internal networks, and sensitive resources. Version 0.12.3 patches the issue.

Betroffene Produkte

  • cpe:2.3:a:internlm:lmdeploy:*:*:*:*:*:*:*:*

GitHub Advisories

GHSA-6w67-hwm5-92mqHIGH

LMDeploy has Server-Side Request Forgery (SSRF) via Vision-Language Image Loading

pip/lmdeploy
GitHub Advisory

Referenzen