Unauthenticated Remote Code Execution in InternLM's LMDeploy Products
CVE-2026-119706

9.3CRITICAL

Key Information:

Vendor

Internlm

Status
Lmdeploy
Vendor
CVE Published:
30 October 2026

What is CVE-2026-119706?

InternLM's LMDeploy versions 0.9.0 to 0.18.0 exhibit a severe security flaw that permits unauthenticated remote code execution. By exploiting the /update_weights endpoint, attackers can send specially crafted base64-encoded pickled data, which is deserialized without appropriate validation by the ForikingPickler.loads method. This vulnerability can lead to arbitrary OS command execution under the api_server process context, compromising the integrity and confidentiality of the system.

Affected Version(s)

lmdeploy 0.9.0 <= 0.18.0

References

https://github.com/InternLM/lmdeploy/issues/4698
issue-tracking
https://github.com/InternLM/lmdeploy
product
https://github.com/InternLM/lmdeploy/blob/v0.18.0/lmdeplo...
technical-description

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

starsalt0124
.