IN
Vendor
InternLM
14
CVEs
0
On KEV
1
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-105135 | MI MindSearch InternLM | 10.0 | Oct 4 | InternLM MindSearch Planner Agent graph.py ExecutionAction.run code injection |
| CVE-2026-33625 | LM lmdeploy InternLM | 8.8 | Sep 18 | LMDeploy vulnerable to arbitrary code execution via eval() of untrusted quant_dtype in model config loading |
| CVE-2025-66455 | LM lmdeploy InternLM | 9.8 | Sep 18 | LMDeploy has Remote Code Execution by Pickle Deserialization via handle_zmq_recv in lmdeploy/lmdeploy/pytorch/disagg/conn/engine_conn.py |
| CVE-2026-92983 | LM lmdeploy InternLM | 7.5 | Sep 17 | InternLM LMDeploy through 0.17.0 Memory Exhaustion via Session ID Mismatch |
| CVE-2026-92971 | LM lmdeploy InternLM | 7.5 | Sep 17 | InternLM LMDeploy through 0.17.0 Assertion Denial of Service |
| CVE-2025-59953 | LM lmdeploy InternLM | 9.8 | Sep 16 | LMdeploy has Remote Code Execution by Pickle Deserialization via zmq_rpc.call_and_response() in InterLM/lmdeploy |
| CVE-2026-76850 | LM lmdeploy InternLM | 9.8 | Aug 19 | LMDeploy Remote Code Execution via Unsafe Pickle Deserialization in the Disaggregated Serving Peer Connector |
| CVE-2026-63764 | LM lmdeploy InternLM | 8.6 | Jul 21 | LMDeploy Server-Side Request Forgery via HTTP Redirect Bypass |
| CVE-2026-46517 | LM lmdeploy InternLM | 7.8 | Jun 9 | LMDeploy: Hardcoded trust_remote_code=True is an implicit unsafe remote-code load path with no user opt-out |
| CVE-2026-46432 | LM lmdeploy InternLM | 7.8 | Jun 9 | LMDeploy: Arbitrary code execution via hardcoded trust_remote_code=True in lmdeploy model initialization |
| CVE-2026-33626 | LM lmdeploy InternLM | 7.5 | Apr 20 | LMDeploy Vulnerable to Server-Side Request Forgery (SSRF) via Vision-Language Image Loading |
| CVE-2025-67729 | LM lmdeploy InternLM | 8.8 | Dec 26 | lmdeploy vulnerable to Arbitrary Code Execution via Insecure Deserialization in torch.load() |
| CVE-2025-3163 | LM LMDeploy InternLM | 7.8 | Apr 3 | InternLM LMDeploy conf.py open code injection |
| CVE-2025-3162 | LM LMDeploy InternLM | 7.8 | Apr 3 | InternLM LMDeploy PT File utils.py load_weight_ckpt deserialization |