Product
Remote Code Execution in LMDeploy via Unsafe Pickle Deserialization
2 TTPs 1 CVEThe LMDeploy library insecurely deserializes untrusted peer-to-peer messages using Python's pickle module, allowing unauthenticated remote attackers to achieve remote code execution by providing a malicious ZMQ endpoint.
LMDeploy Hardcoded trust_remote_code Enables Remote Code Execution (CVE-2026-46517)
2 rules 2 TTPs 1 IOCLMDeploy <= 0.12.3 is vulnerable to remote code execution (CVE-2026-46517) because it hardcodes `trust_remote_code=True` when calling `transformers.AutoConfig.from_pretrained()`, allowing a malicious Hugging Face repository to execute arbitrary Python code when loaded without user opt-out.
LMDeploy Vision-Language Module SSRF Vulnerability
2 rules 1 TTP 1 CVE 4 IOCsA server-side request forgery (SSRF) vulnerability exists in LMDeploy's vision-language module, allowing attackers to access cloud metadata services and internal networks by exploiting the lack of URL validation in the `load_image()` function.