CVE-2026-33626 is a high-severity SSRF vulnerability in InternLM's lmdeploy toolkit, specifically in versions before 0.12.3. The vulnerability exists in the load_image() function within lmdeploy/vl/utils.py, which fetches images from URLs without validating if the URLs point to internal or private IP addresses. This lack of validation enables attackers to make the server perform unauthorized requests to internal network resources, including cloud metadata services, potentially exposing sensitive information. The vulnerability is addressed by updating to lmdeploy version 0.12.3.

Successful exploitation allows an unauthenticated attacker to cause the vulnerable server to make arbitrary HTTP requests to internal or private network addresses. This can lead to unauthorized access to sensitive internal resources such as cloud metadata services, which may expose confidential data or credentials. The vulnerability does not impact integrity or availability directly but has a high confidentiality impact.

Upgrade lmdeploy to version 0.12.3 or later, where the SSRF vulnerability in the load_image() function is patched. Since no official remediation level or patch link is provided beyond this version update, users should verify the upgrade from the vendor's official release notes or repository. No other mitigations are specified.