LMDeploy Vision-Language SSRF

Unvalidated Image URL Fetching Exposes Cloud Metadata and Internal Services

CVE-2026-33626 affects LMDeploy's image-loading functionality for vision-language models. When processing OpenAI-compatible chat requests with image_url parameters, the server fetches URLs without validating destination hosts — creating a Server-Side Request Forgery primitive that grants access to cloud metadata services, internal databases, and private network topology. The vulnerability was exploited in the wild within 12 hours and 31 minutes of advisory publication.

"Attackers are increasingly weaponizing vulnerabilities in inference servers, model gateways, and agent orchestration tools within hours of advisory publication."