CVE-2025-59953 InternLM CVE debrief

Who should care

Defenders of systems using LMDeploy versions 0.9.1 and prior should assess exposure and apply the patch in version 0.10.2. Operators, security teams, and platform administrators should review rpc server configuration and deserialization practices to verify exposure and apply mitigations. Vulnerability management and security teams should monitor for potential exploitation attempts and track exceptions.

Why it matters

CVE-2025-59953 is a critical vulnerability in LMDeploy's rpc server, allowing for remote code execution due to insecure deserialization practices. Defenders should verify exposure, apply the patch, and monitor for potential exploitation attempts.

• Potential remote code execution
• Verification of LMDeploy version and patch application required
• Monitoring for exploitation attempts recommended

Technical summary

LMDeploy's rpc server (AsyncRPCServer in zmq_rpc.py) is vulnerable to remote code execution due to insecure deserialization of received messages using pickles.loads() without sanitization. The vulnerability allows for remote code execution and defenders should verify exposure, apply the patch, and monitor for potential exploitation attempts. A patch is available in version 0.10.2. The CVE record and NVD entry provide details on the LMDeploy vulnerability, with no additional technical claims made beyond source-provided facts.

Defensive priority

High priority for version 0.9.1 and prior, verify exposure and apply patch

Recommended defensive actions

• Verify LMDeploy version and apply patch if necessary
• Review rpc server configuration and deserialization practices
• Monitor for potential exploitation attempts
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed
• Check relevant monitoring, detection, and logs for exposed assets that need extra review

Evidence notes

The CVE record and NVD entry provide details on the LMDeploy vulnerability, with a patch available in version 0.10.2. Defenders should verify exposure by reviewing LMDeploy version and rpc server configuration. The vulnerability allows for remote code execution due to insecure deserialization of received messages using pickles.loads() without sanitization. Evidence limits are based on CVE and NVD entries, with no additional facts claimed.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.