PT-2026-94356

Name of the Vulnerable Software and Affected Versions InternLM LMDeploy versions prior to 0.17.1 Description In DistServe prefill/decode disaggregation mode, the proxy uses user-facing session IDs instead of internal scheduler keys, which prevents the release of scheduler sessions. Unauthenticate...