Priority HIGH 81
InternLM LMDeploy 0.9.0 through 0.18.0 contains an unauthenticated remote code execution vulnerability that allows remote attackers to run OS commands by sending pickled data to the /update_weights endpoint.
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.0103 · Published 2026-10-30 · No fix listed CWE-502
Priority HIGH 82
A vulnerability has been found in InternLM MindSearch 0.1.0.
CVSS 4.0CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.0077 · Published 2026-10-04 · No fix listed CWE-74
Priority HIGH 73
LMDeploy is a toolkit for compressing, deploying, and serving large language models.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00442 · Published 2026-09-18 · Fixed in 0.12.3 CWE-400
Priority MEDIUM 51
LMDeploy is a toolkit for compressing, deploying, and serving large language models.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01266 · Published 2026-09-18 · Fixed in 0.16.0 CWE-502
Priority HIGH 77
InternLM LMDeploy through 0.17.0 in DistServe prefill/decode disaggregation mode fails to release scheduler sessions because the proxy uses user-facing session IDs instead of internal scheduler keys.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00658 · Published 2026-09-17 · No fix listed CWE-772
Priority HIGH 77
InternLM LMDeploy through 0.17.0 contains a reachable assertion vulnerability in the DistServe decode migration loop that allows unauthenticated attackers to terminate the inference engine.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00704 · Published 2026-09-17 · No fix listed CWE-617
Priority HIGH 82
LMDeploy is a toolkit for compressing, deploying, and serving large language models.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00875 · Published 2026-09-16 · Fixed in 0.10.2 CWE-502
Priority HIGH 81
LMDeploy deserializes disaggregated-serving peer messages with pickle.
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.01271 · Published 2026-08-19 · Fixed in 0.16.0 CWE-502
Priority HIGH 73
LMDeploy through 0.14.0, fixed in commit 03c3130, contains a server-side request forgery (SSRF) vulnerability in the _load_http_url function within the connection.py media handler, where the private-IP guard validates on…
CVSS 4.0HIGH 7.7· Network · No auth · No interaction · EPSS 0.00511 · Published 2026-07-21 · Fixed CWE-918
Priority LOW 35
LMDeploy is a toolkit for compressing, deploying, and serving large language models.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00163 · Published 2026-06-09 · Fixed in 0.13.0 CWE-1188
Priority HIGH 69
LMDeploy is a toolkit for compressing, deploying, and serving large language models.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00142 · Published 2026-06-09 · Fixed in 0.13.0 CWE-94
Priority HIGH 72
LMDeploy is a toolkit for compressing, deploying, and serving large language models.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.4525 · Published 2026-04-20 · Fixed in 0.12.3 CWE-918
Priority HIGH 73
LMDeploy is a toolkit for compressing, deploying, and serving LLMs.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00508 · Published 2025-12-26 · Fixed in 0.11.1 CWE-502
Priority MEDIUM 55
A vulnerability was found in InternLM LMDeploy up to 0.7.1.
CVSS 4.0MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.00381 · Published 2025-04-03 · No fix listed CWE-74
Priority MEDIUM 55
A vulnerability was found in InternLM LMDeploy up to 0.7.1.
CVSS 4.0MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.0033 · Published 2025-04-03 · No fix listed CWE-20
THREATIST.IORead the docs