CVE-2024-12376 Server Side Request Forgery in lm-sys/fastchat

What is CVE-2024-12376?

CVE-2024-12376 is a high-severity server-side request forgery vulnerability in lm-sys/fastchat, published on 20 Mar 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A Server-Side Request Forgery (SSRF) vulnerability was identified in the lm-sys/fastchat web server, specifically in the affected version git 2c68a13. This vulnerability allows an attacker to access internal server resources and data that are otherwise inaccessible, such as AWS metadata credentials.

Weakness: CWE-918

Which versions are affected by CVE-2024-12376?

3 open source packages ship an affected version, including fschat. It affects 1 product.

Products include Lm-Sys Fastchat.

How do I fix CVE-2024-12376?

No fix has been published for CVE-2024-12376 yet. Limit exposure of the affected software until one is available.

Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.

Is CVE-2024-12376 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-12376 exists.

Other vulnerabilities in lm-sys/fastchat

• CVE-2024-10044 SSRF in POST /worker_generate_stream API endpoint in lm-sys/fastchat Critical 9.3
• CVE-2024-10907 Denial of Service (DoS) via Multipart Boundary in lm-sys/fastchat High 7.5
• CVE-2024-10912 Denial of Service in lm-sys/fastchat High 7.5
• CVE-2024-11603 Server-Side Request Forgery in lm-sys/fastchat High 7.5
• CVE-2024-10908 Open Redirect in lm-sys/fastchat Medium 6.1

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-g44m-hpf4-vmrp, PYSEC-2026-1396.