HighVulnerabilityLLM-specific
CVE-2026-123818: LMDeploy is a toolkit for compressing, deploying, and serving large language models. From 0.12.3 until 0.15.0…
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-123818
- Published
- Record updated
- Affected
- lmdeploy >= 0.12.3, < 0.15.0
- Fixed in
- 0.15.0
- released July 31, 2026, 101 days before disclosure
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
Summary
CVE-2026-123818 affects LMDeploy, a toolkit for compressing, deploying, and serving large language models, from 0.12.3 through 0.15.0. The _is_safe_url check parses remote media URLs with urlparse, but requests.Session().get handles backslashes differently when sending the request. An attacker can supply a URL whose validated hostname looks globally routable while the request resolves to an internal host, bypassing the non-global address checks and exposing data from internal HTTP services in applications that accept attacker-controlled media URLs.
Mitigation
Fixed in version 0.15.0.
Related items
- HighGHSA-vvr2-h2jp-838m: Code Graph RAG: MCP paginated read_file path traversal / arbitrary file readSimilar attack · GitHub Advisory Database
- MediumAttackers Crash Claude's 'Office Party' Flaw to Run Malicious Code on LinuxSimilar attack · Dark Reading
- MediumCVE-2026-124588: huggingface finetrainers code injection via Library argumentSimilar attack · NVD/CVE Database
- MediumTaiwan-Based Hacker Used BOSSAI AI Agents to Steal Taipei Emergency Dispatch RecordsSimilar attack · The Hacker News
- MediumOn the hunt for ARTEX: understanding agentic attacks in AWS environmentsSimilar attack · Datadog Security Labs