CVE-2025-66455
2 advisories.
PyPI/lmdeploy CVE-2025-66455: critical 9.8
LMDeploy has Remote Code Execution by Pickle Deserialization via handle_zmq_recv in lmdeploy/lmdeploy/pytorch/disagg/conn/engine_conn.py
Action: Upgrade lmdeploy to 0.16.0 or later.
pip install lmdeploy==0.16.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.9.2 | 0.16.0 | - |
Fixed versions
| 0.16.0 |
Sources
- osv: GHSA-2vh9-42vm-xmv2
- https://github.com/InternLM/lmdeploy/security/advisories/GHSA-2vh9-42vm-xmv2
- https://github.com/InternLM/lmdeploy/commit/f05b4ad8bf2e2d84101a1d63b3c44fadd99223b2
- https://github.com/InternLM/lmdeploy
- https://github.com/InternLM/lmdeploy/releases/tag/v0.16.0
CVE-2025-66455 · published · modified · JSON
PyPI/lmdeploy CVE-2025-66455: critical 9.8
LMDeploy has Remote Code Execution by Pickle Deserialization via handle_zmq_recv in lmdeploy/lmdeploy/pytorch/disagg/conn/engine_conn.py
Action: Upgrade lmdeploy to 0.16.0 or later.
pip install lmdeploy==0.16.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.9.2 | 0.16.0 | - |
Fixed versions
| 0.16.0 |
Sources
- osv: PYSEC-2026-4077
- https://github.com/InternLM/lmdeploy/security/advisories/GHSA-2vh9-42vm-xmv2
- https://github.com/InternLM/lmdeploy/commit/f05b4ad8bf2e2d84101a1d63b3c44fadd99223b2
- https://github.com/InternLM/lmdeploy
- https://github.com/InternLM/lmdeploy/releases/tag/v0.16.0
- https://pypi.org/project/lmdeploy
- https://github.com/advisories/GHSA-2vh9-42vm-xmv2
- https://nvd.nist.gov/vuln/detail/CVE-2025-66455
CVE-2025-66455 · published · modified · JSON