Remote Code Execution in LMDeploy by InternLM via Unsafe Deserialization

CVE-2026-76850

What is CVE-2026-76850?

LMDeploy's handling of peer-to-peer messages using the pickle module creates a vulnerability that can lead to remote code execution. The deserialization of peer messages occurs without proper validation, allowing an attacker to control the ZMQ endpoint. This flaw is exacerbated by insufficient authentication on critical API endpoints, permitting malicious actors to send crafted requests that can execute arbitrary code within the engine process. Users not implementing disaggregated serving remain unaffected, as the vulnerable receive loop only initiates when a connection is established.

References