LMDeploy CVE-2026-33626 Flaw Exploited Within 13 Hours of Disclosure
Summary: A high-severity SSRF flaw in LMDeploy, tracked as CVE-2026-33626 with a CVSS score of 7.5, came under active exploitation in the wild less than 13 hours after its public disclosure. Sysdig detected the first exploitation attempt against its honeypots 12 hours and 31 minutes after the vulnerability was published on GitHub, originating from IP address 103.116.72[.]119, which used the vision-language image loader to port-scan AWS IMDS, Redis, MySQL, an administrative interface, and an out-of-band DNS exfiltration endpoint across 10 requests in an eight-minute session.
Key Takeaway: The load_image() function in lmdeploy/vl/utils.py fetches arbitrary URLs without validating internal or private IP addresses, and attackers reached cloud metadata services and internal networks before most downstream users could apply a fix, with no proof-of-concept exploit required at the time of the attack.