# lmdeploy (PyPI) vulnerabilities 9 known vulnerabilities (2 critical, 5 high, 2 medium), with the versions each affects and the releases that fix them. ## At a glance - Latest release: 0.18.0 (Sep 28, 2026): no advisory affects it - Newest unaffected release: 0.18.0 (Sep 28, 2026), the latest release - Weekly downloads: 13.7K - Dependents: 1 - Releases: 58 since 0.0.10 (Sep 26, 2023) - Registry: https://pypi.org/project/lmdeploy/ - Releases read: Nov 8, 2026 ## Version timeline Affected versions per advisory, in version order: - CVE-2026-33625: 0.12.1 to 0.12.2 (0.12.3 is outside it) - CVE-2025-66455: 0.9.2 to 0.15.0 (0.16.0 is outside it) - CVE-2025-59953: 0.9.1 to 0.10.1 (0.10.2 is outside it) - CVE-2026-46517: 0.0.10 to 0.12.3 (0.13.0 is outside it) - CVE-2026-46432: 0.0.10 to 0.12.3 (0.13.0 is outside it) - CVE-2026-33626: 0.0.10 to 0.12.2 (0.12.3 is outside it) - CVE-2025-67729: 0.0.10 to 0.11.0 (0.11.1 is outside it) - CVE-2025-3163: 0.0.10 to 0.7.1 (0.7.2 is outside it) - CVE-2025-3162: 0.0.10 to 0.7.1 (0.7.2 is outside it) ## Advisories (9) ### [CVE-2026-33625](https://cve.now/CVE-2026-33625): LMDeploy vulnerable to arbitrary code execution via eval() of untrusted quant\_dtype in model config loading - Severity: High 8.8 - Published: Sep 18, 2026 - Affected: from 0.12.1, fixed in 0.12.3. - Fixed in 0.12.3 (released Apr 22, 2026, 149 days before disclosure). - The latest release, 0.18.0, is not affected. ### [CVE-2025-66455](https://cve.now/CVE-2025-66455): LMDeploy has Remote Code Execution by Pickle Deserialization via handle\_zmq\_recv in lmdeploy/lmdeploy/pytorch/disagg/conn/engine\_conn.py - Severity: Critical 9.8 - Published: Sep 18, 2026 - Affected: from 0.9.2, fixed in 0.16.0. - Fixed in 0.16.0 (released Aug 19, 2026, 30 days before disclosure). - The latest release, 0.18.0, is not affected. ### [CVE-2025-59953](https://cve.now/CVE-2025-59953): LMdeploy has Remote Code Execution by Pickle Deserialization via zmq\_rpc.call\_and\_response() in InterLM/lmdeploy - Severity: Critical 9.8 - Published: Sep 16, 2026 - Affected: from 0.9.1, fixed in 0.10.2. - Fixed in 0.10.2 (released Oct 28, 2025, 323 days before disclosure). - The latest release, 0.18.0, is not affected. ### [CVE-2026-46517](https://cve.now/CVE-2026-46517): LMDeploy: Hardcoded trust\_remote\_code=True is an implicit unsafe remote-code load path with no user opt-out - Severity: High 7.8 - Published: Jun 9, 2026 - Affected: through 0.12.3; fixed in 0.13.0. - Fixed in 0.13.0 (released May 12, 2026, 28 days before disclosure). - The latest release, 0.18.0, is not affected. ### [CVE-2026-46432](https://cve.now/CVE-2026-46432): LMDeploy: Arbitrary code execution via hardcoded trust\_remote\_code=True in lmdeploy model initialization - Severity: High 7.8 - Published: Jun 9, 2026 - Affected: fixed in 0.13.0. - Fixed in 0.13.0 (released May 12, 2026, 28 days before disclosure). - The latest release, 0.18.0, is not affected. ### [CVE-2026-33626](https://cve.now/CVE-2026-33626): LMDeploy Vulnerable to Server-Side Request Forgery (SSRF) via Vision-Language Image Loading - Severity: High 7.5 - Published: Apr 20, 2026 - Affected: through 0.12.2. - Fixed in 0.12.3 (released Apr 22, 2026, 2 days after disclosure), the first release outside every affected range (no listed fixed version clears them all). - The latest release, 0.18.0, is not affected. ### [CVE-2025-67729](https://cve.now/CVE-2025-67729): lmdeploy vulnerable to Arbitrary Code Execution via Insecure Deserialization in torch.load() - Severity: High 8.8 - Published: Dec 26, 2025 - Affected: fixed in 0.11.1. - Fixed in 0.11.1 (released Dec 24, 2025, 2 days before disclosure). - The latest release, 0.18.0, is not affected. ### [CVE-2025-3163](https://cve.now/CVE-2025-3163): InternLM LMDeploy conf.py open code injection - Severity: Medium 4.8 - Published: Apr 3, 2025 - Affected: through 0.7.1. - Fixed in 0.7.2 (released Mar 19, 2025, 15 days before disclosure), the first release outside every affected range (no listed fixed version clears them all). - The latest release, 0.18.0, is not affected. ### [CVE-2025-3162](https://cve.now/CVE-2025-3162): InternLM LMDeploy PT File utils.py load\_weight\_ckpt deserialization - Severity: Medium 4.8 - Published: Apr 3, 2025 - Affected: through 0.7.1. - Fixed in 0.7.2 (released Mar 19, 2025, 15 days before disclosure), the first release outside every affected range (no listed fixed version clears them all). - The latest release, 0.18.0, is not affected. --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/packages/pypi/lmdeploy Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.