CVE-2026-33626 is a high-severity SSRF vulnerability (CWE-918) in InternLM's lmdeploy toolkit, specifically in versions before 0.12.3. The vulnerability exists in the load_image() function within lmdeploy/vl/utils.py, which does not validate URLs for internal or private IP addresses before fetching them. This lack of validation enables attackers to make the server perform unauthorized requests to internal resources, such as cloud metadata services or other sensitive internal network endpoints. The vulnerability has a CVSS 3.1 base score of 7.5, indicating a high impact on confidentiality with no required privileges or user interaction. The vulnerability was publicly disclosed on 2026-04-20, and the vendor has released version 0.12.3 to address the issue.

Successful exploitation of this SSRF vulnerability can lead to unauthorized access to sensitive internal resources, including cloud metadata services, which may expose confidential information. The vulnerability impacts confidentiality but does not affect integrity or availability. There are no known exploits in the wild at this time.

Upgrade lmdeploy to version 0.12.3 or later, where this SSRF vulnerability is patched. Since the vendor advisory does not specify any other mitigation or temporary fixes, applying the official update is the recommended remediation. Patch status is not explicitly confirmed in the advisory fields but the description states version 0.12.3 fixes the issue.