Product by InternLM

    InternLM LMDeploy

    14 known vulnerabilities in InternLM LMDeploy (InternLM), 0 of them actively exploited (CISA KEV).

    Key figures

    14

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    4

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in InternLM LMDeploy (InternLM)
    HighCVE-2026-33626

    LMDeploy Vulnerable to Server-Side Request Forgery (SSRF) via Vision-Language Image Loading

    		7.5
    CriticalCVE-2025-66455

    InternLM LMDeploy: Deserialization of Untrusted Data

    		9.8
    CriticalCVE-2026-76850

    InternLM LMDeploy: Deserialization of Untrusted Data

    		9.8
    CriticalCVE-2026-119706

    LMDeploy 0.9.0 through 0.18.0 Unauthenticated RCE via /update_weights Pickle Deserialization

    		9.8
    CriticalCVE-2025-59953

    InternLM LMDeploy: Deserialization of Untrusted Data

    		9.8
    HighCVE-2026-92971

    InternLM LMDeploy through 0.17.0 Assertion Denial of Service

    		7.5
    HighCVE-2026-92983

    InternLM LMDeploy through 0.17.0 Memory Exhaustion via Session ID Mismatch

    		7.5
    HighCVE-2026-33625

    InternLM LMDeploy: Uncontrolled Resource Consumption

    		8.8
    HighCVE-2026-63764

    LMDeploy Server-Side Request Forgery via HTTP Redirect Bypass

    		8.6
    HighCVE-2025-67729

    lmdeploy vulnerable to Arbitrary Code Execution via Insecure Deserialization in torch.load()

    		8.8
    HighCVE-2026-46517

    InternLM LMDeploy: Code Injection

    		7.8
    HighCVE-2026-46432

    InternLM LMDeploy: Code Injection

    		7.8
    HighCVE-2025-3163

    InternLM LMDeploy conf.py open code injection

    		5.3
    HighCVE-2025-3162

    InternLM LMDeploy PT File utils.py load_weight_ckpt deserialization

    		5.3

    All products by InternLM