lmdeploy's OpenAI API Server Exposed to SSRF via Redirects

lmdeploy's OpenAI-compatible API server is affected by an SSRF flaw (CVE-2026-63764, CVSS 9.3) that lets unauthenticated attackers reach internal services and cloud metadata endpoints. The issue stems from following HTTP 302 redirects without re-checking each hop against the URL safety guard and was added to the NVD on July 21, 2026.

Source:NVD

Post

lmdeploy's OpenAI API Server Exposed to SSRF via Redirects

TL;DRAI · 60 sec read

NVD has added a newly published record describing a server-side request forgery issue in the lmdeploy project.

The vulnerability allows unauthenticated attackers to access internal services.

The vulnerability allows unauthenticated attackers to access internal services. According to the entry, the OpenAI-compatible API server in lmdeploy can be abused by unauthenticated parties who leverage a crafted image_url parameter to reach internal services and cloud metadata endpoints. The reported CVSS 3.1 base score assigned by VulnCheck stands at 9.3 critical.

From The CircuitryThe Feed — live briefs across tech, all day.See what’s happening →

Attackers exploit the flaw through crafted POST requests. A malicious actor reportedly sends a POST to the chat completions endpoint using an image_url that first targets an attacker-controlled server. That server returns an HTTP 302 redirect aimed at loopback addresses or instance-metadata services. The bypass occurs because the implementation follows redirects but skips any further safety validation on subsequent hops.

The bypass occurs because the implementation follows redirects but skips any further safety validation on subsequent hops.

The vulnerability is tracked as CVE-2026-63764. VulnCheck supplied the CVE record that reached the NVD dataset on July 21, 2026. It is classified under CWE-918 for Server-Side Request Forgery. A separate CVSS 4.0 vector supplied by the same CNA scores the issue 9.2 critical.

References point to the lmdeploy project and a detailed advisory. The NVD entry contains links to the project's GitHub repository, an open issue at https://github.com/InternLM/lmdeploy/issues/4761, and the VulnCheck advisory that first detailed the redirect bypass. No patch information is listed in the current record.

Why this mattersAI · ~100 words

Tap a lens to see what this story means for you.

Reader-supported

DonateBuy me a coffee →Follow@thecircuitry_ →Follow@thecircuitry.to →

Reader-supported · The Brief

Liked this? The Brief brings you the whole day in tech, verified, every morning. Two minutes, free forever.

HELP US IMPROVE

Reader-supported

The Circuitry is a passion project I've always wanted to build, and I love the work behind it.

Running it costs real money. APIs, hosting, time. To keep improving the site and growing this into something useful for everyone, those costs have to be covered.

Any contribution is appreciated. If not, no pressure. Thanks for reading.

Buy me a coffee

vulnerability security lmdeploy

MORE IN TECH

Tesla Unveils Production Cybercab With Unboxed Manufacturing

Tesla revealed the production Cybercab at an Austin event on September 4, 2026, showcasing its unboxed manufacturing process and new hardware components. The two-seater autonomous vehicle uses a pure-vision system with a drag coefficient under 0.20 and omits any immediate plans for individual customer sales.

NHTSA Launches Probe Into Tesla Cybercab as Austin Rides Begin

Tesla began public rides in its steering-wheel-free Cybercab in Austin this evening while NHTSA opened an Audit Query into the company’s determination that the vehicle meets existing federal safety standards. The review targets Tesla’s self-certification at a moment when the agency is revising eight rules for driverless cars and other robotaxi developers have secured exemptions.

VW Plans 100k Job Cuts, May Halt EV Production at 4 Plants

Volkswagen's supervisory board has unanimously approved the Future Plan 2030, which includes an additional 50,000 job cuts worldwide to reach a total of around 100,000 and leaves four German plants without secured future vehicle production after 2031-2034. The move aims to reduce costs and improve competitiveness against Chinese rivals, with alternative uses for the factories to be examined by June 2027.