CVE-2026-33626 – InternLM lmdeploy

This patch addresses CVE-2026-33626 in InternLM’s lmdeploy. The issue exposes the system to a significant security risk that could be leveraged to compromise operations or data integrity. The CVSS score is 7.5, which is High severity. This level of severity indicates a strong potential for damage if left unpatched, especially in production environments.

Proof-of-concept code is publicly available, confirming that exploitation is practical and not just theoretical. This increases the urgency for remediation, as attackers can replicate the issue with minimal effort. The patch closes the gap and reduces exposure to active misuse.