critical9.8
CVE-2026-119706
LMDeploy 0.9.0 through 0.18.0 Unauthenticated RCE via /update_weights Pickle Deserialization
InternLM · lmdeploy
Get the evidence behind this dependency. Browse imported advisories below, or check an exact version against OSV now. View source coverage.
Get a fresh OSV lookup for an exact release. We send the package name and version to OSV without storing a report.