Remote Code Execution in LMDeploy Toolkit Affects InternLM Products
CVE-2025-59953

9.8CRITICAL

Key Information:

Vendor

Internlm

Status
Lmdeploy
Vendor
CVE Published:
16 September 2026

What is CVE-2025-59953?

The LMDeploy toolkit, utilized for compressing and deploying large language models, contains a significant vulnerability within its RPC server (AsyncRPCServer in zmq_rpc.py). The affected versions (0.9.1 and 0.10.0) improperly handle the deserialization of messages through pickles.loads(), allowing remote code execution without any form of sanitization. Users are advised to update to version 0.10.2, which addresses and mitigates this risk.

Affected Version(s)

lmdeploy >= 0.9.1, < 0.10.2

References

https://github.com/InternLM/lmdeploy/security/advisories/...
x_refsource_CONFIRM
https://github.com/InternLM/lmdeploy/releases/tag/v0.10.2
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.