Vendors / InternLM Records 15 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 5
CVSS high 8
Exploited now InternLM records in CISA KEV No InternLM vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 73
LMDeploy through 0.14.0, fixed in commit 03c3130, contains a server-side request forgery (SSRF) vulnerability in the _load_http_url function within the connection.py media handler, where the private-IP guard validates on…
CVSS 4.0 HIGH 7.7· Network · No auth · No interaction · EPSS 0.00511 · Published 2026-07-21 · Fixed CWE-918
Priority HIGH 73
LMDeploy is a toolkit for compressing, deploying, and serving LLMs.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00508 · Published 2025-12-26 · Fixed in 0.11.1 CWE-502
Priority HIGH 72
LMDeploy is a toolkit for compressing, deploying, and serving large language models.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.4525 · Published 2026-04-20 · Fixed in 0.12.3 CWE-918
Priority MEDIUM 55
A vulnerability was found in InternLM LMDeploy up to 0.7.1.
CVSS 4.0 MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.00381 · Published 2025-04-03 · No fix listed CWE-74
Priority MEDIUM 55
A vulnerability was found in InternLM LMDeploy up to 0.7.1.
CVSS 4.0 MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.0033 · Published 2025-04-03 · No fix listed CWE-20
Open these records in search → All records by CVSS severity
5 8 2 0 0
