{"uuid": "895e0f16-adab-4d4a-9d0a-58f34809db38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-59953", "type": "seen", "source": "https://gist.github.com/alon710/efe1b2090e21bb0a7cf5f18ce00c2614", "content": "# CVE-2025-59953: CVE-2025-59953: Unauthenticated Remote Code Execution in LMDeploy AsyncRPCServer via Insecure Pickle Deserialization\n\n> **CVSS Score:** 9.8\n> **Published:** 2026-09-16\n> **Full Report:** https://cvereports.com/reports/CVE-2025-59953\n\n## Summary\nLMDeploy prior to version 0.10.2 is vulnerable to remote code execution because its AsyncRPCServer component implements unauthenticated, remote-accessible communication sockets and uses the insecure pickle.loads() deserializer to process incoming requests.\n\n## TL;DR\nUnauthenticated remote attackers can execute arbitrary code on LMDeploy hosts prior to v0.10.2 by sending a malicious Python pickle stream to the dynamically opened ZMQ RPC port.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-502\n- **Attack Vector**: Network\n- **Complexity**: Low\n- **Privileges Required**: None\n- **EPSS Score**: N/A\n- **Exploit Status**: Proof-of-Concept\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- lmdeploy\n- **lmdeploy**: >= 0.9.1, < 0.10.2 (Fixed in: `0.10.2`)\n\n## Mitigation\n\n- Upgrade LMDeploy to 0.10.2 or higher\n- Implement firewall rules to block high random ports\n- Use local container network namespaces without host networking\n- Run services under a non-root low-privileged user account\n\n**Remediation Steps:**\n1. Run pip install --upgrade lmdeploy\n2. Verify local binding in zmq_rpc.py is localhost\n3. Establish micro-segmentation rules on model server host nodes\n\n## References\n\n- [GitHub Security Advisory GHSA-5h8j-6crg-7rmw](https://github.com/InternLM/lmdeploy/security/advisories/GHSA-5h8j-6crg-7rmw)\n- [Commit d86046a0e6b02ecaaf7cdb74346d0477130221c2](https://github.com/InternLM/lmdeploy/commit/d86046a0e6b02ecaaf7cdb74346d0477130221c2)\n- [LMDeploy v0.10.2 Release](https://github.com/InternLM/lmdeploy/releases/tag/v0.10.2)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2025-59953) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-16T18:31:42.521113Z"}