Insecure Deserialization Flaw in LMDeploy by InternLM
CVE-2025-67729

8.8HIGH

Key Information:

Vendor

Internlm

Status
Lmdeploy
Vendor
CVE Published:
26 December 2025

What is CVE-2025-67729?

LMDeploy, a toolkit designed for compressing, deploying, and serving large language models, exhibits an insecure deserialization vulnerability. This flaw arises from the improper handling of model checkpoint files, as the function torch.load() is invoked without the weights_only=True parameter. This oversight allows attackers to potentially execute arbitrary code on a victim’s machine when a user loads a compromised .bin or .pt file. The vulnerability has been addressed and patched in version 0.11.1 of LMDeploy.

Affected Version(s)

lmdeploy < 0.11.1

References

https://github.com/InternLM/lmdeploy/security/advisories/...
x_refsource_CONFIRM
https://github.com/InternLM/lmdeploy/commit/eb04b4281c578...
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-67729 : Insecure Deserialization Flaw in LMDeploy by InternLM