CVE-2026-63764

LMDeploy through 0.14.0, fixed in commit 03c3130, contains a server-side request forgery (SSRF) vulnerability in the _load_http_url function within the connection.py media handler, where the private-IP guard validates only the original URL without re-validating hosts after HTTP redirects. An unauthenticated attacker can submit a crafted image_url to the chat completions endpoint pointing to an attacker-controlled host that returns a redirect to a private IP or cloud-metadata endpoint, causing the server to follow the redirect and expose internal service content through the model pipeline.

• CWE-918

• https://github.com/InternLM/lmdeploy/commit/03c313006d17cc3feae86b633c44206a997c44dbPatch
• https://github.com/InternLM/lmdeploy/issues/4761Exploit, Issue Tracking, Mitigation
• https://github.com/InternLM/lmdeploy/pull/4734Issue Tracking, Patch
• https://www.vulncheck.com/advisories/lmdeploy-server-side-request-forgery-via-http-redirect-bypassExploit, Patch, Third Party Advisory
• https://github.com/InternLM/lmdeploy/issues/4761Exploit, Issue Tracking, Mitigation

Published

Jul 21, 2026

Last Modified

Sep 17, 2026

Status

Analyzed

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-63759SurrealDB before 3.1.0 fails to enforce recursion depth limi…7.1
• CVE-2026-6376A weakness in SpiceJet’s public booking retrieval page permi…8.7
• CVE-2026-63760SurrealDB before 3.1.0 fails to enforce the configured recur…8.7
• CVE-2026-63761SurrealDB before 3.1.0 silently substitutes the ES384 algori…5.3
• CVE-2026-63762SurrealDB before v2.6.1 (and before v3.0.0-beta.3) contains …6.5
• CVE-2026-63763SurrealDB before 2.5.0 and before 3.0.0-beta.3 contains a co…8.8
• CVE-2026-63765Chatwoot before 4.16.0 contains an authentication bypass vul…8.2
• CVE-2026-63766GPT-SoVITS through 20250606v2pro contains an OS command inje…9.8
• CVE-2026-63767ktransformers through 0.6.3, fixed in commit def0f93, contai…9.8
• CVE-2026-63768cal.diy through 6.2.0 contains an open redirect vulnerabilit…4.3
• CVE-2026-63769Huginn before 2026.09.09 contains a server-side request forg…7.7
• CVE-2026-6377Improper Limitation of a Pathname to a Restricted Directory …7.5