CVE-2025-59953

9.8 CRITICALpublic exploit available

Published 2026-09-16 · Updated 2026-09-18

AI risk analysis

Summary: The vulnerability allows remote code execution due to improper deserialization of messages in the rpc server.
Exploitability: Exploitation is relatively easy as it requires sending maliciously crafted pickled data to the RPC server.
Blast radius: If exploited, this could lead to full compromise of systems hosting the LMDeploy service.
Prioritized remediation: Update to version 0.10.2 or later which includes a patch for this vulnerability.

rcedeserializationrpcpatch

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

LMDeploy is a toolkit for compressing, deploying, and serving large language models. Starting in version 0.9.1 and prior to version 0.10.2, the LMdeploy implements an rpc server (AsyncRPCServer in zmq_rpc.py) for supporting the RPC communications. In its core functionality call_and_response(), I found it will directly use the pickles.loads() to deserialize the received messages without any sanitization, hence resulting in a remote code execution vulnerability by this RPC server. Version 0.10.2 contains a patch.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-502

Public exploit & PoC references

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.