CVE-2026-63764: lmdeploy through 0.14.0 (inclusive), 0 through 0.14.0

Affected technology

lmdeploy · through 0.14.0 (inclusive)
internlm

lmdeploy · 0 through 0.14.0
InternLM

Description’s affected range: through 0.14.0, fixed in commit 03c3130,

Component: Not specified by the source
Function: within

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · No privileges required · No user interaction required

What an attacker can do

An unauthenticated attacker can submit a crafted image_url to the chat completions endpoint pointing to an attacker-controlled host that returns a redirect to a private IP or cloud-metadata endpoint, causing the server to follow the redirect and expose internal service content through the model pipeline. Vendor/CNA’s CVSS 4.0 assessment (base score 7.7/10) rates confidentiality, integrity and availability impact as none.