Login Request a demo
LM
Product
lmdeploy
by InternLM · last CVE Sep 18, 2026
13
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities13In the news1Timeline
Severity mix
Critical 3High 10Medium 0Low 0
Severity
All severities13Critical3High10Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add lmdeploy to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-66455
9.8
1%
Sep 18
LMDeploy has Remote Code Execution by Pickle Deserialization via handle_zmq_recv in lmdeploy/lmdeploy/pytorch/disagg/conn/engine_conn.py
Affected: >= 0.9.2, < 0.16.0
CVE-2025-59953
9.8
1%
Sep 16
LMdeploy has Remote Code Execution by Pickle Deserialization via zmq_rpc.call_and_response() in InterLM/lmdeploy
Affected: >= 0.9.1, < 0.10.2
CVE-2026-76850
9.8
1%
Aug 19
LMDeploy Remote Code Execution via Unsafe Pickle Deserialization in the Disaggregated Serving Peer Connector
Affected: 0.9.2 before 0.16.0
Showing 3