PT-2026-94336 · Internlm+1 · Lmdeploy
CVSS v4.0
8.7
High
| Vector | AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
InternLM LMDeploy versions prior to 0.17.1
Description
A reachable assertion issue exists in the DistServe decode migration loop. An unauthenticated attacker can terminate the inference engine by submitting a
migration request containing an empty remote block ids list. This action triggers an AssertionError that crashes the engine loop, causing all subsequent inference requests to fail.Recommendations
Update InternLM LMDeploy to version 0.17.1 or later.
Exploit
Fix
DoS
Assertion Failure
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Lmdeploy