InternLM

Records15All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high8CVSS 7.0–8.9

Exploited now

InternLM records in CISA KEV

No InternLM vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Lmdeploy 5 records HIGH

Records

15 records

TI-2026-67516 CVE-2026-105135 · GHSA-4535-w5r2-pmqp

InternLM MindSearch Planner Agent graph.py ExecutionAction.run code injection

HIGH 82

A vulnerability has been found in InternLM MindSearch 0.1.0.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.0077 Published 2026-10-04 No fix listed CWE-74

TI-2025-37341 CVE-2025-59953 · GHSA-5h8j-6crg-7rmw

LMdeploy has Remote Code Execution by Pickle Deserialization via zmq_rpc.call_and_response() in InterLM/lmdeploy

HIGH 82

LMDeploy is a toolkit for compressing, deploying, and serving large language models.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00875 Published 2026-09-16 Fixed in 0.10.2 CWE-502

TI-2026-83181 CVE-2026-119706 · GHSA-fq46-3gxq-v4vc

Unauthenticated RCE in InternLM LMDeploy via pickle deserialization

HIGH 81

InternLM LMDeploy 0.9.0 through 0.18.0 contains an unauthenticated remote code execution vulnerability that allows remote attackers to run OS commands by sending pickled data to the /update_weights endpoint.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0103 Published 2026-10-30 No fix listed CWE-502

TI-2026-53684 CVE-2026-76850 · GHSA-q66m-3fcg-jjh7

LMDeploy Remote Code Execution via Unsafe Pickle Deserialization in the Disaggregated Serving Peer Connector

HIGH 81

LMDeploy deserializes disaggregated-serving peer messages with pickle.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01271 Published 2026-08-19 Fixed in 0.16.0 CWE-502

TI-2026-62637 CVE-2026-92983 · GHSA-p3qj-xm37-gqqf

InternLM LMDeploy through 0.17.0 Memory Exhaustion via Session ID Mismatch

HIGH 77

InternLM LMDeploy through 0.17.0 in DistServe prefill/decode disaggregation mode fails to release scheduler sessions because the proxy uses user-facing session IDs instead of internal scheduler keys.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00658 Published 2026-09-17 No fix listed CWE-772

TI-2026-62632 CVE-2026-92971 · GHSA-3j7h-8qqw-4p7v

InternLM LMDeploy through 0.17.0 Assertion Denial of Service

HIGH 77

InternLM LMDeploy through 0.17.0 contains a reachable assertion vulnerability in the DistServe decode migration loop that allows unauthenticated attackers to terminate the inference engine.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00704 Published 2026-09-17 No fix listed CWE-617

TI-2026-45351 CVE-2026-63764 · GHSA-rqhf-rg9p-w5gg

LMDeploy Server-Side Request Forgery via HTTP Redirect Bypass

HIGH 73

LMDeploy through 0.14.0, fixed in commit 03c3130, contains a server-side request forgery (SSRF) vulnerability in the _load_http_url function within the connection.py media handler, where the private-IP guard validates on…

CVSS 4.0HIGH 7.7 Network No auth No interaction EPSS 0.00511 Published 2026-07-21 Fixed CWE-918

TI-2026-26007 CVE-2026-33625 · GHSA-3hmm-rh5q-gwwr

LMDeploy vulnerable to arbitrary code execution via eval() of untrusted quant_dtype in model config loading

HIGH 73

LMDeploy is a toolkit for compressing, deploying, and serving large language models.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00442 Published 2026-09-18 Fixed in 0.12.3 CWE-400

TI-2025-41425 CVE-2025-67729 · GHSA-9pf3-7rrr-x5jh

lmdeploy vulnerable to Arbitrary Code Execution via Insecure Deserialization in torch.load()

HIGH 73

LMDeploy is a toolkit for compressing, deploying, and serving LLMs.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00508 Published 2025-12-26 Fixed in 0.11.1 CWE-502

TI-2026-26008 CVE-2026-33626 · GHSA-6w67-hwm5-92mq

LMDeploy Vulnerable to Server-Side Request Forgery (SSRF) via Vision-Language Image Loading

HIGH 72

LMDeploy is a toolkit for compressing, deploying, and serving large language models.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.4525 Published 2026-04-20 Fixed in 0.12.3 CWE-918

TI-2026-34143 CVE-2026-46432 · GHSA-m549-qq94-fvhg

LMDeploy: Arbitrary code execution via hardcoded trust_remote_code=True in lmdeploy model initialization

HIGH 69

LMDeploy is a toolkit for compressing, deploying, and serving large language models.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00142 Published 2026-06-09 Fixed in 0.13.0 CWE-94

TI-2025-02763 CVE-2025-3163 · GHSA-jfvg-qm4p-473x

InternLM LMDeploy conf.py open code injection

MEDIUM 55

A vulnerability was found in InternLM LMDeploy up to 0.7.1.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00381 Published 2025-04-03 No fix listed CWE-74

TI-2025-02762 CVE-2025-3162 · GHSA-7vc5-mjwp-c8fq

InternLM LMDeploy PT File utils.py load_weight_ckpt deserialization

MEDIUM 55

A vulnerability was found in InternLM LMDeploy up to 0.7.1.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.0033 Published 2025-04-03 No fix listed CWE-20

TI-2025-40887 CVE-2025-66455 · GHSA-2vh9-42vm-xmv2

Deserialization of untrusted data in InternLM lmdeploy

MEDIUM 51

LMDeploy is a toolkit for compressing, deploying, and serving large language models.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01266 Published 2026-09-18 Fixed in 0.16.0 CWE-502

TI-2026-34206 CVE-2026-46517 · GHSA-9xq9-36w5-q796

LMDeploy: Hardcoded trust_remote_code=True is an implicit unsafe remote-code load path with no user opt-out

LOW 35

LMDeploy is a toolkit for compressing, deploying, and serving large language models.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00163 Published 2026-06-09 Fixed in 0.13.0 CWE-1188

Open these records in search →

Critical	5
High	8
Medium	2
Low	0
No CVSS	0