Login Request a demo
LM
Product
lmdeploy
by InternLM · last CVE Oct 30, 2026
14
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Vulnerabilities14In the news1Timeline
Severity mix
Critical 4High 10Medium 0Low 0
Severity
All severities14Critical4High10Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add lmdeploy to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-119706
New
9.8–Oct 30
LMDeploy 0.9.0 through 0.18.0 Unauthenticated RCE via /update_weights Pickle Deserialization
Affected: 0.9.0 through 0.18.0
CVE-2025-66455
9.8
1%
Sep 18
LMDeploy has Remote Code Execution by Pickle Deserialization via handle_zmq_recv in lmdeploy/lmdeploy/pytorch/disagg/conn/engine_conn.py
Affected: >= 0.9.2, < 0.16.0
CVE-2025-59953
9.8
1%
Sep 16
LMdeploy has Remote Code Execution by Pickle Deserialization via zmq_rpc.call_and_response() in InterLM/lmdeploy
Affected: >= 0.9.1, < 0.10.2
CVE-2026-76850
9.8
1%
Aug 19
LMDeploy Remote Code Execution via Unsafe Pickle Deserialization in the Disaggregated Serving Peer Connector
Affected: 0.9.2 before 0.16.0
Showing 4