Remote Code Execution Vulnerability in LMDeploy Affected by Unsafe Deserialization

CVE-2025-66455

What is CVE-2025-66455?

LMDeploy, a toolkit for deploying large language models, has a vulnerability in its DistServe control plane, enabling remote code execution due to unsafe deserialization of messages received through a ZeroMQ PULL socket. Versions prior to 0.16.0 utilize recv_pyobj() for this purpose, which leverages Python's pickle mechanism, allowing an attacker to send a crafted payload that executes arbitrary code. This vulnerability can be exploited if the affected DistServe API is accessible over the network without proper authentication, particularly in deployments where API-key authentication hasn't been configured. Users are advised to upgrade to version 0.16.0 or implement security measures such as restricting network access to DistServe endpoints, enabling API-key authentication, and preventing untrusted external connections to mitigate risks.

References