https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 17 Sep 2026 16:39:28 +0000 https://vulnerability.circl.lu/sighting/895e0f16-adab-4d4a-9d0a-58f34809db38/export {"uuid": "895e0f16-adab-4d4a-9d0a-58f34809db38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-59953", "type": "seen", "source": "https://gist.github.com/alon710/efe1b2090e21bb0a7cf5f18ce00c2614", "content": "# CVE-2025-59953: CVE-2025-59953: Unauthenticated Remote Code Execution in LMDeploy AsyncRPCServer via Insecure Pickle Deserialization\n\n> **CVSS Score:** 9.8\n> **Published:** 2026-09-16\n> **Full Report:** https://cvereports.com/reports/CVE-2025-59953\n\n## Summary\nLMDeploy prior to version 0.10.2 is vulnerable to remote code execution because its AsyncRPCServer component implements unauthenticated, remote-accessible communication sockets and uses the insecure pickle.loads() deserializer to process incoming requests.\n\n## TL;DR\nUnauthenticated remote attackers can execute arbitrary code on LMDeploy hosts prior to v0.10.2 by sending a malicious Python pickle stream to the dynamically opened ZMQ RPC port.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-502\n- **Attack Vector**: Network\n- **Complexity**: Low\n- **Privileges Required**: None\n- **EPSS Score**: N/A\n- **Exploit Status**: Proof-of-Concept\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- lmdeploy\n- **lmdeploy**: >= 0.9.1, < 0.10.2 (Fixed in: `0.10.2`)\n\n## Mitigation\n\n- Upgrade LMDeploy to 0.10.2 or higher\n- Implement firewall rules to block high random ports\n- Use local container network namespaces without host networking\n- Run services under a non-root low-privileged user account\n\n**Remediation Steps:**\n1. Run pip install --upgrade lmdeploy\n2. Verify local binding in zmq_rpc.py is localhost\n3. Establish micro-segmentation rules on model server host nodes\n\n## References\n\n- [GitHub Security Advisory GHSA-5h8j-6crg-7rmw](https://github.com/InternLM/lmdeploy/security/advisories/GHSA-5h8j-6crg-7rmw)\n- [Commit d86046a0e6b02ecaaf7cdb74346d0477130221c2](https://github.com/InternLM/lmdeploy/commit/d86046a0e6b02ecaaf7cdb74346d0477130221c2)\n- [LMDeploy v0.10.2 Release](https://github.com/InternLM/lmdeploy/releases/tag/v0.10.2)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2025-59953) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-16T18:31:42.521113Z"} {"uuid": "895e0f16-adab-4d4a-9d0a-58f34809db38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-59953", "type": "seen", "source": "https://gist.github.com/alon710/efe1b2090e21bb0a7cf5f18ce00c2614", "content": "# CVE-2025-59953: CVE-2025-59953: Unauthenticated Remote Code Execution in LMDeploy AsyncRPCServer via Insecure Pickle Deserialization\n\n> **CVSS Score:** 9.8\n> **Published:** 2026-09-16\n> **Full Report:** https://cvereports.com/reports/CVE-2025-59953\n\n## Summary\nLMDeploy prior to version 0.10.2 is vulnerable to remote code execution because its AsyncRPCServer component implements unauthenticated, remote-accessible communication sockets and uses the insecure pickle.loads() deserializer to process incoming requests.\n\n## TL;DR\nUnauthenticated remote attackers can execute arbitrary code on LMDeploy hosts prior to v0.10.2 by sending a malicious Python pickle stream to the dynamically opened ZMQ RPC port.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-502\n- **Attack Vector**: Network\n- **Complexity**: Low\n- **Privileges Required**: None\n- **EPSS Score**: N/A\n- **Exploit Status**: Proof-of-Concept\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- lmdeploy\n- **lmdeploy**: >= 0.9.1, < 0.10.2 (Fixed in: `0.10.2`)\n\n## Mitigation\n\n- Upgrade LMDeploy to 0.10.2 or higher\n- Implement firewall rules to block high random ports\n- Use local container network namespaces without host networking\n- Run services under a non-root low-privileged user account\n\n**Remediation Steps:**\n1. Run pip install --upgrade lmdeploy\n2. Verify local binding in zmq_rpc.py is localhost\n3. Establish micro-segmentation rules on model server host nodes\n\n## References\n\n- [GitHub Security Advisory GHSA-5h8j-6crg-7rmw](https://github.com/InternLM/lmdeploy/security/advisories/GHSA-5h8j-6crg-7rmw)\n- [Commit d86046a0e6b02ecaaf7cdb74346d0477130221c2](https://github.com/InternLM/lmdeploy/commit/d86046a0e6b02ecaaf7cdb74346d0477130221c2)\n- [LMDeploy v0.10.2 Release](https://github.com/InternLM/lmdeploy/releases/tag/v0.10.2)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2025-59953) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-16T18:31:42.521113Z"} https://vulnerability.circl.lu/sighting/895e0f16-adab-4d4a-9d0a-58f34809db38/export Wed, 16 Sep 2026 18:31:42 +0000 https://vulnerability.circl.lu/sighting/04c20391-7b60-4cda-a9c3-4395648b4f8b/export {"uuid": "04c20391-7b60-4cda-a9c3-4395648b4f8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-59953", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvnqvpl4ba2b", "content": "CVE-2025-59953 - lmdeploy\nThe LMdeploy software includes an RPC server that accepts messages and deserializes them without checking their content. An attacker who can send a specially crafted message\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lmdeploy #internlm #pip #CVE #infosec", "creation_timestamp": "2026-09-16T18:20:05.843424Z"} {"uuid": "04c20391-7b60-4cda-a9c3-4395648b4f8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-59953", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvnqvpl4ba2b", "content": "CVE-2025-59953 - lmdeploy\nThe LMdeploy software includes an RPC server that accepts messages and deserializes them without checking their content. An attacker who can send a specially crafted message\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lmdeploy #internlm #pip #CVE #infosec", "creation_timestamp": "2026-09-16T18:20:05.843424Z"} https://vulnerability.circl.lu/sighting/04c20391-7b60-4cda-a9c3-4395648b4f8b/export Wed, 16 Sep 2026 18:20:05 +0000 https://vulnerability.circl.lu/sighting/1223e08a-f52d-4c7a-abb4-365f250e7cc0/export {"uuid": "1223e08a-f52d-4c7a-abb4-365f250e7cc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-59953", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvnq7qjmsm25", "content": "\ud83d\udea8 CVE-2025-59953 \u2014 CVSS 9.8 CRITICAL\n\nLMDeploy is a toolkit for compressing, deploying, and serving large language models. Starting in version 0....\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2025-59953\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-16T18:07:47.772136Z"} {"uuid": "1223e08a-f52d-4c7a-abb4-365f250e7cc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-59953", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvnq7qjmsm25", "content": "\ud83d\udea8 CVE-2025-59953 \u2014 CVSS 9.8 CRITICAL\n\nLMDeploy is a toolkit for compressing, deploying, and serving large language models. Starting in version 0....\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2025-59953\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-16T18:07:47.772136Z"} https://vulnerability.circl.lu/sighting/1223e08a-f52d-4c7a-abb4-365f250e7cc0/export Wed, 16 Sep 2026 18:07:47 +0000 https://vulnerability.circl.lu/sighting/f18edfe9-6618-4c54-a490-73892741de80/export {"uuid": "f18edfe9-6618-4c54-a490-73892741de80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-59953", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/cfid76vzr44xo", "content": "CVE-2025-59953 - LMdeploy has Remote Code Execution by Pickle Deserialization via zmq_rpc.call_and_response() in InterLM/lmdeploy\nCVE ID : CVE-2025-59953\n \n Published : Sept. 16, 2026, 3:36 p.m. | 9\u00a0minutes ago\n \n Description : LMDeploy is a toolkit for compressing, deploying,...", "creation_timestamp": "2026-09-16T17:20:31.991608Z"} {"uuid": "f18edfe9-6618-4c54-a490-73892741de80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-59953", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/cfid76vzr44xo", "content": "CVE-2025-59953 - LMdeploy has Remote Code Execution by Pickle Deserialization via zmq_rpc.call_and_response() in InterLM/lmdeploy\nCVE ID : CVE-2025-59953\n \n Published : Sept. 16, 2026, 3:36 p.m. | 9\u00a0minutes ago\n \n Description : LMDeploy is a toolkit for compressing, deploying,...", "creation_timestamp": "2026-09-16T17:20:31.991608Z"} https://vulnerability.circl.lu/sighting/f18edfe9-6618-4c54-a490-73892741de80/export Wed, 16 Sep 2026 17:20:31 +0000 https://vulnerability.circl.lu/sighting/4e890b4e-1e4e-43d2-b274-cfb49e2f2f9f/export {"uuid": "4e890b4e-1e4e-43d2-b274-cfb49e2f2f9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-59953", "type": "published-proof-of-concept", "source": "https://github.com/InternLM/lmdeploy/security/advisories/GHSA-5h8j-6crg-7rmw", "content": "", "creation_timestamp": "2026-09-16T16:35:02.155197Z"} {"uuid": "4e890b4e-1e4e-43d2-b274-cfb49e2f2f9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-59953", "type": "published-proof-of-concept", "source": "https://github.com/InternLM/lmdeploy/security/advisories/GHSA-5h8j-6crg-7rmw", "content": "", "creation_timestamp": "2026-09-16T16:35:02.155197Z"} https://vulnerability.circl.lu/sighting/4e890b4e-1e4e-43d2-b274-cfb49e2f2f9f/export Wed, 16 Sep 2026 16:35:02 +0000