CVE-2025-59953

LMDeploy (by InternLM ), a toolkit for compressing, deploying, and serving large language models, is affected by a remote code execution vulnerability in versions 0.9.1 through 0.10.1 . The root cause lies in the AsyncRPCServer component (zmq_rpc.py), where the call_and_response() function direct...

EUVD-2025-210921

LMDeploy is a toolkit for compressing, deploying, and serving large language models. Starting in version 0.9.1 and prior to version 0.10.2, the LMdeploy implements an rpc server AsyncRPCServer in zmqrpc.py for supporting the RPC communications. In its core functionality callandresponse, I found i...