A AegiFlow
CRITICALCVSS 9.8EPSS 0.7%

CVE-2025-59953

CVE-2025-59953 updated by NVD

Published
2026-09-16
Modified
2026-09-20
EPSS percentile
51%
Sources
github-advisory, nvd

Summary

LMDeploy is a toolkit for compressing, deploying, and serving large language models. Starting in version 0.9.1 and prior to version 0.10.2, the LMdeploy implements an rpc server (AsyncRPCServer in zmq_rpc.py) for supporting the RPC communications. In its core functionality call_and_response(), I found it will directly use the pickles.loads() to deserialize the received messages without any sanitization, hence resulting in a remote code execution vulnerability by this RPC server. Version 0.10.2 contains a patch.

Affected packages

EcosystemPackageAffected versionsFixed versions
PyPIlmdeploy0.10.2

Remediation: Upgrade to 0.10.2 or later.

References

Includes data from the GitHub Advisory Database, licensed under CC-BY 4.0.

Includes data from the National Vulnerability Database (NIST). NVD data is in the public domain; this page is not endorsed by NIST.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.

EPSS scores provided by the FIRST.org Exploit Prediction Scoring System.