{"id":"CVE-2025-59953","summary":"LMdeploy has Remote Code Execution by Pickle Deserialization via zmq_rpc.call_and_response() in InterLM/lmdeploy","details":"LMDeploy is a toolkit for compressing, deploying, and serving large language models. Starting in version 0.9.1 and prior to version 0.10.2, the LMdeploy implements an rpc server (AsyncRPCServer in zmq_rpc.py) for supporting the RPC communications. In its core functionality call_and_response(), I found it will directly use the pickles.loads() to deserialize the received messages without any sanitization, hence resulting in a remote code execution vulnerability by this RPC server. Version 0.10.2 contains a patch.","aliases":["GHSA-5h8j-6crg-7rmw"],"modified":"2026-09-19T03:30:30.525086507Z","published":"2026-09-16T15:36:02.095Z","database_specific":{"cwe_ids":["CWE-502"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/59xxx/CVE-2025-59953.json","cna_assigner":"GitHub_M"},"references":[{"type":"WEB","url":"https://github.com/InternLM/lmdeploy/releases/tag/v0.10.2"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/59xxx/CVE-2025-59953.json"},{"type":"ADVISORY","url":"https://github.com/InternLM/lmdeploy/security/advisories/GHSA-5h8j-6crg-7rmw"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-59953"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/internlm/lmdeploy","events":[{"introduced":"db1849b5c62f2dd2e7e9c0e354390bce6a0bec32"},{"fixed":"f36aa716e9bacddb9b2e17e713ac397f7eb0ae36"}],"database_specific":{"source":["AFFECTED_FIELD","REFERENCES"],"extracted_events":[{"introduced":"0.9.1"},{"fixed":"0.10.2"}]}}],"versions":["v0.10.1","v0.10.0","v0.9.2","v0.9.1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-59953.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}