{"id":"CVE-2026-123818","published":"2026-11-09T22:18:38.437","lastModified":"2026-11-09T22:18:38.570","description":"LMDeploy is a toolkit for compressing, deploying, and serving large language models. From 0.12.3 until 0.15.0, _is_safe_url validates remote media URLs with urlparse while requests.Session().get interprets backslashes differently when sending the request. An attacker can provide a URL whose validation hostname appears globally routable but whose request destination resolves to an internal host, bypassing non-global address checks. Applications that accept attacker-controlled remote media URLs can therefore be induced to access internal HTTP services and expose data available from those services. This issue is fixed in version 0.15.0.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwes":["CWE-918"],"vendors":[],"products":[],"references":[{"url":"https://github.com/InternLM/lmdeploy/commit/03c313006d17cc3feae86b633c44206a997c44db","tags":[]},{"url":"https://github.com/InternLM/lmdeploy/pull/4734","tags":[]},{"url":"https://github.com/InternLM/lmdeploy/releases/tag/v0.15.0","tags":[]},{"url":"https://github.com/InternLM/lmdeploy/security/advisories/GHSA-39wr-7q6h-cf68","tags":[]}],"exploitRefs":[{"url":"https://github.com/InternLM/lmdeploy/commit/03c313006d17cc3feae86b633c44206a997c44db","tags":[]},{"url":"https://github.com/InternLM/lmdeploy/pull/4734","tags":[]},{"url":"https://github.com/InternLM/lmdeploy/releases/tag/v0.15.0","tags":[]},{"url":"https://github.com/InternLM/lmdeploy/security/advisories/GHSA-39wr-7q6h-cf68","tags":[]}],"hasPoc":true,"ai":null}