SSRF in Internlm Lmdeploy
CVE-2026-123818
LMDeploy is a toolkit for compressing, deploying, and serving large language models. From 0.12.3 until 0.15.0, _is_safe_url validates remote media URLs with urlparse while requests.Session().get interprets backslashes differently when sending the request. An attacker can provide a URL whose validation hostname appears globally routable but whose request destination resolves to an internal host, bypassing non-global address checks. Applications that accept attacker-controlled remote media URLs can therefore be induced to access internal HTTP services and expose data available from those services. This issue is fixed in version 0.15.0.
Vulnerability class: SSRF (Server-Side Request Forgery)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
EPSS exploit prediction
No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.
Affected products
- Internlm Lmdeploy — versions >= 0.12.3, < 0.15.0
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2026-123818?
- CVE-2026-123818 is a high-severity vulnerability in Internlm Lmdeploy, classified under Server-Side Request Forgery (SSRF). CVSS score: 7.5/10. Published 2026-11-09.
- How severe is CVE-2026-123818?
- High severity. CVSS v3 base score is 7.5 out of 10.