Internlm Lmdeploy vulnerabilities

• internlm lmdeploy LMDeploy 0.9.0 through 0.18.0 Unauthenticated RCE via /update_weights Pickle Deserialization CVE-2026-119706 9.3 CriticalOctober 30, 2026
• internlm lmdeploy LMDeploy vulnerable to arbitrary code execution via eval() of untrusted quant_dtype in model config loading CVE-2026-33625 Fix available 8.8 HighSeptember 18, 2026
• internlm lmdeploy LMDeploy has Remote Code Execution by Pickle Deserialization via handle_zmq_recv in lmdeploy/lmdeploy/pytorch/disagg/conn/engine_conn.py CVE-2025-66455 Fix available 9.8 CriticalSeptember 18, 2026
• internlm lmdeploy InternLM LMDeploy through 0.17.0 Memory Exhaustion via Session ID Mismatch CVE-2026-92983 8.7 HighSeptember 17, 2026
• internlm lmdeploy InternLM LMDeploy through 0.17.0 Assertion Denial of Service CVE-2026-92971 8.7 HighSeptember 17, 2026
• internlm lmdeploy LMdeploy has Remote Code Execution by Pickle Deserialization via zmq_rpc.call_and_response() in InterLM/lmdeploy CVE-2025-59953 Fix available 9.8 CriticalSeptember 16, 2026
• internlm lmdeploy LMDeploy Remote Code Execution via Unsafe Pickle Deserialization in the Disaggregated Serving Peer Connector CVE-2026-76850 9.3 CriticalAugust 19, 2026
• internlm lmdeploy LMDeploy Server-Side Request Forgery via HTTP Redirect Bypass CVE-2026-63764 7.7 HighJuly 21, 2026
• internlm lmdeploy LMDeploy: Hardcoded trust_remote_code=True is an implicit unsafe remote-code load path with no user opt-out CVE-2026-46517 Fix available 7.8 HighMay 21, 2026
• internlm lmdeploy LMDeploy: Arbitrary code execution via hardcoded trust_remote_code=True in lmdeploy model initialization CVE-2026-46432 Fix available 7.8 HighMay 21, 2026
• internlm lmdeploy LMDeploy Vulnerable to Server-Side Request Forgery (SSRF) via Vision-Language Image Loading CVE-2026-33626 Public exploit EPSS 45.2% 7.5 HighApril 20, 2026
• internlm lmdeploy lmdeploy vulnerable to Arbitrary Code Execution via Insecure Deserialization in torch.load() CVE-2025-67729 Fix available 8.8 HighDecember 26, 2025
• internlm lmdeploy InternLM LMDeploy conf.py open code injection CVE-2025-3163 4.8 MediumApril 3, 2025
• internlm lmdeploy InternLM LMDeploy PT File utils.py load_weight_ckpt deserialization CVE-2025-3162 4.8 MediumApril 3, 2025