CVE-2025-59953

Name of the Vulnerable Software and Affected Versions LMDeploy versions 0.9.1 through 0.10.1

Description LMDeploy implements an RPC server via AsyncRPCServer in zmq rpc.py to support RPC communications. The call and response() function uses pickle.loads() to deserialize received messages without proper sanitization. This allows a remote attacker to send malicious pickle data to the RPC address, leading to remote code execution on the victim's machine. The RPC server previously bound to tcp://*, which exposed the service to the network on a randomly selected port.

Recommendations Update to version 0.10.2. Enable authentication in RPC services to ensure only trusted users can join the cluster. As a temporary mitigation, restrict access to the RPC server to localhost to remove the remote network attack surface.