InternLM LMDeploy 0.9.0 — CVE-2026-119706 (Critical)

Date Oct 30, 2026

Type Vendor advisory

Signal Critical vendor advisory

Vendor / Product InternLM · LMDeploy 0.9.0

CVE CVE-2026-119706

Critical vendor advisory CVE-2026-119706

Summary

InternLM LMDeploy 0.9.0 through 0.18.0 contains an unauthenticated remote code execution vulnerability that allows remote attackers to run OS commands by sending pickled data to the /update_weights endpoint. Attackers can submit a base64-encoded crafted pickle in serialized_named_tensors, which ForkingPickler.loads deserializes without validation, executing commands as the api_server process.

Why it matters

This CVE carries a CRITICAL severity rating (CVSS 9.8) in InternLM LMDeploy 0.9.0. Patch or mitigate promptly. EPSS percentile: 64%.

Operator check

Review CVE-2026-119706 in your asset inventory. Apply patches per vendor guidance and verify LMDeploy 0.9.0 is not exposed. CVSS score: 9.8. EPSS probability: 1.0%; percentile: 64%.

Sources

NVD — CVE-2026-119706 Source reference Source reference

PatchBrief uses public sources. It does not scan environments, verify exposure, or replace vendor guidance.

Get watched-vendor alerts Subscribe free Back to feed