Skip to content
The Nexus
DossierENTITY

LMDeploy

Coverage of LMDeploy in the Nexus archive.

Earliest in view: Apr 24 · 07:24 UTCMost recent: Apr 24 · 07:24 UTC
Co-mentioned in this coverage
CVE-2026-33626topic1Server-Side Request Forgerytopic1CVSS score: 7.5topic1open-source toolkittopic1sensitive datatopic1
Recent coverage
  • SECURITYApr 24 · 07:24 UTCTHE HACKER NEWS
    LMDeploy CVE-2026-33626 Flaw Exploited Within 13 Hours of Disclosure

    A high-severity SSRF vulnerability (CVE-2026-33626) in LMDeploy, an open-source LLM deployment toolkit, was actively exploited in the wild within 13 hours of disclosure. The flaw, rated CVSS 7.5, allows attackers to access sensitive data via server-side request forgery.

LMDeploy · Dossier · The Nexus