InternLM lmdeploy
14 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-119706 | 0.9.0 – 0.18.0 | LMDeploy 0.9.0 through 0.18.0 Unauthenticated RCE via /update_weights Pickle Deserialization | CRITICAL 9.3 | |||
| CVE-2026-33625 | >= 0.12.1, < 0.12.3 | LMDeploy vulnerable to arbitrary code execution via eval() of untrusted quant_dtype in model config loading | HIGH 8.8 | 0.4 % | ||
| CVE-2025-66455 | >= 0.9.2, < 0.16.0 | LMDeploy has Remote Code Execution by Pickle Deserialization via handle_zmq_recv in lmdeploy/lmdeploy/pytorch/disagg/conn/engine_conn.py | CRITICAL 9.8 | 1.3 % | ||
| CVE-2026-92983 | ≤ 0.17.0 | InternLM LMDeploy through 0.17.0 Memory Exhaustion via Session ID Mismatch | HIGH 8.7 | 0.7 % | ||
| CVE-2026-92971 | ≤ 0.17.0 | InternLM LMDeploy through 0.17.0 Assertion Denial of Service | HIGH 8.7 | 0.7 % | ||
| CVE-2025-59953 | >= 0.9.1, < 0.10.2 | LMdeploy has Remote Code Execution by Pickle Deserialization via zmq_rpc.call_and_response() in InterLM/lmdeploy | CRITICAL 9.8 | 0.9 % | ||
| CVE-2026-76850 | 0.9.2 – < 0.16.0 | LMDeploy Remote Code Execution via Unsafe Pickle Deserialization in the Disaggregated Serving Peer Connector | CRITICAL 9.3 | 1.3 % | ||
| CVE-2026-63764 | ≤ 0.14.0 | LMDeploy Server-Side Request Forgery via HTTP Redirect Bypass | HIGH 7.7 | 0.5 % | ||
| CVE-2026-46517 | <= 0.12.3 | LMDeploy: Hardcoded trust_remote_code=True is an implicit unsafe remote-code load path with no user opt-out | HIGH 7.8 | 0.2 % | ||
| CVE-2026-46432 | <= 0.12.3 | LMDeploy: Arbitrary code execution via hardcoded trust_remote_code=True in lmdeploy model initialization | HIGH 7.8 | 0.1 % | ||
| CVE-2026-33626 | < 0.12.3 | LMDeploy Vulnerable to Server-Side Request Forgery (SSRF) via Vision-Language Image Loading | HIGH 7.5 | 45 % | ||
| CVE-2025-67729 | < 0.11.1 | lmdeploy vulnerable to Arbitrary Code Execution via Insecure Deserialization in torch.load() | HIGH 8.8 | 0.5 % | ||
| CVE-2025-3163 | 0.7.0 ; 0.7.1 | InternLM LMDeploy conf.py open code injection | MEDIUM 4.8 | 0.4 % | ||
| CVE-2025-3162 | 0.7.0 ; 0.7.1 | InternLM LMDeploy PT File utils.py load_weight_ckpt deserialization | MEDIUM 4.8 | 0.3 % |