CVE-2025-59953
- Source
- https://cve.org/CVERecord?id=CVE-2025-59953
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-59953.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2025-59953
- Aliases
- Published
- 2026-09-16T15:36:02Z
- Modified
- 2026-10-28T02:31:09Z
- Severity
-
- 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- LMdeploy has Remote Code Execution by Pickle Deserialization via zmq_rpc.call_and_response() in InterLM/lmdeploy
- Details
-
LMDeploy is a toolkit for compressing, deploying, and serving large language models. Starting in version 0.9.1 and prior to version 0.10.2, the LMdeploy implements an rpc server (AsyncRPCServer in zmq_rpc.py) for supporting the RPC communications. In its core functionality call_and_response(), I found it will directly use the pickles.loads() to deserialize the received messages without any sanitization, hence resulting in a remote code execution vulnerability by this RPC server. Version 0.10.2 contains a patch.
- Database specific
{ "cna_assigner": "GitHub_M", "cwe_ids": [ "CWE-502" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/59xxx/CVE-2025-59953.json" }- References
Affected packages
Git / github.com/internlm/lmdeploy
Affected ranges
- Type
- GIT
- Repo
- https://github.com/internlm/lmdeploy
- Events
- Database specific
-
Show details
{ "extracted_events": [ { "range": [ { "introduced": "0.9.1" }, { "fixed": "0.10.2" } ], "source": "AFFECTED_FIELD", "strategy": "StringRangeExpression" }, { "original_tag": "v0.10.2", "range": [ { "fixed": "f36aa716e9bacddb9b2e17e713ac397f7eb0ae36" } ], "source": "REFERENCES_TAG" } ] }