CVE-2026-123818 LMDeploy URL parser disagreement permits SSRF filter bypass
- Exploited in the wild
- Not known
- Fix
- Available
What is CVE-2026-123818?
CVE-2026-123818 is a high-severity vulnerability in InternLM lmdeploy, published on 9 Nov 2026.
Official description
LMDeploy is a toolkit for compressing, deploying, and serving large language models. From 0.12.3 until 0.15.0, _is_safe_url validates remote media URLs with urlparse while requests.Session().get interprets backslashes differently when sending the request. An attacker can provide a URL whose validation hostname appears globally routable but whose request destination resolves to an internal host, bypassing non-global address checks. Applications that accept attacker-controlled remote media URLs can therefore be induced to access internal HTTP services and expose data available from those services. This issue is fixed in version 0.15.0.
Weakness: CWE-918
Which versions are affected by CVE-2026-123818?
1 open source package ship an affected version, including lmdeploy.
| Package | Affected | Fixed in |
|---|---|---|
lmdeploy PyPI | From 0.12.3 | 0.15.0 |
How do I fix CVE-2026-123818?
Upgrade lmdeploy to 0.15.0 or later.
Is CVE-2026-123818 being exploited?
There is no known exploitation of CVE-2026-123818 in the wild and no public exploit code.
Sources
Also known as GHSA-39wr-7q6h-cf68.