CVE-2026-63764

Name of the Vulnerable Software and Affected Versions lmdeploy (affected versions not specified)

Description The OpenAI-compatible API server is subject to server-side request forgery, a flaw where the server is tricked into making requests to an unintended location. Unauthenticated attackers can access internal services and cloud metadata endpoints by sending a POST request to the chat completions endpoint using a crafted image url. The attack involves pointing the image url to a server controlled by the attacker that returns an HTTP 302 redirect to internal addresses, such as loopback or instance-metadata endpoints. This bypasses the initial URL safety check because the server follows redirects without re-validating each hop through the safety guard.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.