Skip to content

CVE record · 1 source

CVE-2026-119706

CVSS 9.8

InternLM LMDeploy 0.9.0 through 0.18.0 contains an unauthenticated remote code execution vulnerability that allows remote attackers to run OS…

Vendor: InternLM
Product: lmdeploy
CVSS v3.1: 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 0.010 (p64)
Weakness: CWE-502

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

43

CVE NVD 40h ago

InternLM LMDeploy 0.9.0 through 0.18.0 contains an unauthenticated remote code execution vulnerability that allows remote attackers to run OS…

InternLM LMDeploy 0.9.0 through 0.18.0 contains an unauthenticated remote code execution vulnerability that allows remote attackers to run OS commands by sending pickled data to the /update_weights endpoint. Attackers can submit…

PoC public CVSS 9.8 CVE-2026-119706 InternLM