CVE-2026-33625

Name of the Vulnerable Software and Affected Versions LMDeploy versions 0.12.1 through 0.12.2

Description Code injection is possible when loading a malicious HuggingFace model. The issue occurs because the quant dtype value from the model's quantization config is passed to the eval() function in lmdeploy/pytorch/config.py without validation. An attacker can exploit this by publishing a model with a crafted quantization config.quant dtype variable, leading to arbitrary Python code execution on the machine loading the model. This represents a supply-chain attack vector affecting users who load untrusted models in local, cloud, or production environments.

Recommendations Update to version 0.12.3.