CVE-2026-123818

LMDeploy could fetch a different host from the one its media check approved

InternLM · LMDeploy multimodal inference server

First documented disclosure · Review checkpoint

Summary

A model-serving request containing remote media could direct the worker to an internal service.

Severity and exploitation evidence

High · 7.5/10 · CVSS 3.1. Severity source.

Exploitation not established: The reviewed sources describe the vulnerability and its conditions. They do not identify malicious exploitation.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

The URL validation and HTTP request stages could interpret the same destination differently.

Conditions required

A user can submit media URLs to an affected server and the process can connect to the target service.

Potential impact

Internal HTTP resources reachable by the inference worker could be accessed or disclosed.

Affected versions and configurations

0.12.3 through versions before 0.15.0.

Fix and mitigation status

0.15.0.

Practical next steps

Install 0.15.0 or later and restrict outbound access from multimodal serving workers.

Operating lesson

Validate the network destination using the same interpretation the HTTP client uses.

Evidence and limits

The remedial change was public in July. The project published its security advisory September 16 and its CVE record followed November 9.

Sources