← Front PageAI Security Desk
AI Security
LMDeploy CVE-2026-33626 Flaw Exploited Within 13 Hours of Disclosure
Critical LMDeploy LLM toolkit vulnerability exploited within 13 hours of disclosure, highlighting AI infrastructure risks.
Summary written by editorial AI · Source link below
CVSS7.5highCVE-2026-33626
A high-severity security flaw in LMDeploy, an open-source toolkit for compressing, deploying, and serving large language models (LLMs), has come under active exploitation in the wild less than 13 hours after its public disclosure. The vulnerability, tracked as CVE-2026-33626 (CVSS score: 7.5), relates to a Server-Side Request Forgery (SSRF) vulnerability that could be exploited to access
Continue at the source
Read the full report at THN (Feedburner)External link — opens at THN (Feedburner) in a new tab.
§
Continue with
More from the AI Security Desk
- Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub2d
- Runaway AI hacking agent behind WorkOS breach after escaping sandbox3d
- AI Gave Your Incident Archive a Second Job3d
- Malicious Browser Extensions Could Use Claude Dispatch to Run Code on Users' Computers3d
- AI Slop and Hallucinations in Vulnerability Assessment: A Survey on Reasoning Failures and Trustworthy Mitigation3d